{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "YouTrack ist eine webbasierte Plattform für Projektmanagement, Issue- und Bug-Tracking, Helpdesk sowie die Verwaltung und Nachverfolgung von Arbeitsabläufen und Aufgaben.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in JetBrains You Track ausnutzen, um Sicherheitsvorkehrungen zu umgehen um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen und um beliebigen Programmcode auszuführen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- Sonstiges\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-3696 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3696.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-3696 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3696"
    }, {
      "category" : "external",
      "summary" : "JetBrains Fixed security issues vom 2026-09-30",
      "url" : "https://www.jetbrains.com/privacy-security/issues-fixed/"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100257 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100257"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100258 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100258"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100259 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100259"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100260 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100260"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100261 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100261"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100262 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100262"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100263 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100263"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100267 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100267"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100268 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100268"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100269 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100269"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100270 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100270"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100271 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100271"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100272 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100272"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100273 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100273"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100274 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100274"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100275 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100275"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100276 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100276"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100277 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100277"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100278 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100278"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100279 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100279"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-100280 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-100280"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-103488 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-103488"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-103489 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-103489"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-103490 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-103490"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-103491 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-103491"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-103492 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-103492"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-103493 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-103493"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-103494 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-103494"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-103495 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-103495"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-103496 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-103496"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-103497 vom 2026-09-30",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-103497"
    } ],
    "source_lang" : "en-US",
    "title" : "JetBrains You Track: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-09-30T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-10-01T11:31:33.477+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-3696",
      "initial_release_date" : "2026-09-30T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-09-30T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<2026.2.19422",
          "product" : {
            "name" : "JetBrains You Track <2026.2.19422",
            "product_id" : "T060540"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.2.19422",
          "product" : {
            "name" : "JetBrains You Track 2026.2.19422",
            "product_id" : "T060540-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:youtrack:2026.2.19422"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "You Track"
      } ],
      "category" : "vendor",
      "name" : "JetBrains"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-100257",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100257"
  }, {
    "cve" : "CVE-2026-100258",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100258"
  }, {
    "cve" : "CVE-2026-100259",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100259"
  }, {
    "cve" : "CVE-2026-100260",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100260"
  }, {
    "cve" : "CVE-2026-100261",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100261"
  }, {
    "cve" : "CVE-2026-100262",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100262"
  }, {
    "cve" : "CVE-2026-100263",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100263"
  }, {
    "cve" : "CVE-2026-100264",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100264"
  }, {
    "cve" : "CVE-2026-100267",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100267"
  }, {
    "cve" : "CVE-2026-100268",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100268"
  }, {
    "cve" : "CVE-2026-100269",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100269"
  }, {
    "cve" : "CVE-2026-100270",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100270"
  }, {
    "cve" : "CVE-2026-100271",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100271"
  }, {
    "cve" : "CVE-2026-100272",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100272"
  }, {
    "cve" : "CVE-2026-100273",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100273"
  }, {
    "cve" : "CVE-2026-100274",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100274"
  }, {
    "cve" : "CVE-2026-100275",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100275"
  }, {
    "cve" : "CVE-2026-100276",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100276"
  }, {
    "cve" : "CVE-2026-100277",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100277"
  }, {
    "cve" : "CVE-2026-100278",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100278"
  }, {
    "cve" : "CVE-2026-100279",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100279"
  }, {
    "cve" : "CVE-2026-100280",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-100280"
  }, {
    "cve" : "CVE-2026-103488",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-103488"
  }, {
    "cve" : "CVE-2026-103489",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-103489"
  }, {
    "cve" : "CVE-2026-103490",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-103490"
  }, {
    "cve" : "CVE-2026-103491",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-103491"
  }, {
    "cve" : "CVE-2026-103492",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-103492"
  }, {
    "cve" : "CVE-2026-103493",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-103493"
  }, {
    "cve" : "CVE-2026-103494",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-103494"
  }, {
    "cve" : "CVE-2026-103495",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-103495"
  }, {
    "cve" : "CVE-2026-103496",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-103496"
  }, {
    "cve" : "CVE-2026-103497",
    "product_status" : {
      "known_affected" : [ "T060540" ]
    },
    "release_date" : "2026-09-30T22:00:00.000+00:00",
    "title" : "CVE-2026-103497"
  } ]
}