CVE-2026-86485
Low · 3.3CVSS
3.3
EPSS
0.2%
Published
Sep 7, 2026
CISA due date
—
The record
In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-3690 OpenClaw Canvas Authentication Bypass Vulnerability. CWE-291
- CVE-2026-4252 A vulnerability was identified in Tenda AC8 16.03.50.11. CWE-291
- GHSA-vvjh-f6p9-5vcf OpenClaw Canvas Authentication Bypass Vulnerability CWE-291
- CVE-2025-66602 A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. CWE-291
- CVE-2025-59101 Instead of typical session tokens or cookies, it is verified on a per-request basis if… CWE-291