TLP:WHITE9 IOCs

JetBrains Patches Authentication Bypass and Code Execution Attacks in YouTrack and Kotlin

Cyber Press

Published July 2, 2026Original Report

Diamond Model

Initial AccessTA0001·T1190

1/7

Exploit Public-Facing Application

ActionBypass authentication via predictable codes

An unauthenticated attacker exploits predictable account-restore codes to take over any account, including administrator accounts.

Analysis unavailable

Type	Indicator	Confidence	Score	First Seen
CVE	CVE-2026-53915 exploitintel-blogmalware	Medium	51	Jul 2, 26
CVE	CVE-2026-49366 exploitintel-blogmalware	Medium	51	Jul 2, 26
CVE	CVE-2026-49367 exploitintel-blogmalware	Medium	51	Jul 2, 26
CVE	CVE-2026-56142 exploitintel-blogmalware	Medium	51	Jul 2, 26
CVE	CVE-2026-56141 exploitintel-blogmalware	Medium	51	Jul 2, 26
CVE	CVE-2026-49373 exploitintel-blogmalware	Medium	51	Jul 2, 26
CVE	CVE-2026-33392 exploitintel-blogmalware	Medium	51	Jul 2, 26
CVE	CVE-2026-44413 exploitintel-blogmalware	Medium	51	Jul 2, 26
CVE	CVE-2026-50242 exploitintel-blogmalware	Medium	51	Jul 2, 26

IOC Relationship Graph9 total IOCs

CVE

scroll to zoom · drag to pan · click IOC to open