CVE-2026-50242

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0570%

EPSS Percentile23.49th

PublishedJun 19, 2026

Last ModifiedJun 19, 2026

Vulnerability Description

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://www.jetbrains.com/privacy-security/issues-fixed/

Related Vulnerabilities

CVE-2026-1052010.0

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenti...

CVE-2026-4830310.0

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that c...

CVE-2026-361110.0

The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default co...

CVE-2026-4713710.0

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) introduced...