CVE-2026-100266
Jetbrains Hub: missing authorisation
- Risk score
- 42/100
- CVSS
- 6.5 v3.1
- Exploit chance (30 days)
- 0.2%
- Published
- 30 Sep 2026
Open in the live forecast Today's forecast
What to know
- What it is
- In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address
- Affected
- Jetbrains Hub before 2026.2.52366
- Fix
- Upgrade Jetbrains Hub to 2026.2.52366 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 6.5 medium
References
Original description
In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address
Last activity 30 Sep 2026. Patch Forecast updates every hour.