CVE-2026-50242 AKAOMA CVE VULNERABILITIES / 1d In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible

Back cve.akaoma.com

CVE-2026-50242 AKAOMA CVE VULNERABILITIES / 1d In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible

cve.akaoma.com • June 20, 2026

Share: View original

10.0 /10 Critical Risk As a catastrophic security flaw, CVE-2026-50242 has severe implications, demanding immediate intervention.

As a catastrophic security flaw, CVE-2026-50242 has severe implications, demanding immediate intervention.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Authentication Bypass in JetBrains Hub (CVE-2026-50242) CVE-2026-50242, published on June 19, 2026, reveals a critical authentication bypass vulnerability in JetBrains Hub versions prior to 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, and 2024.2.148429. This flaw allows attackers to gain administrative access through direct database access, posing severe risks to affected systems. The vulnerability has been classified with a CVSS score of 10.0, indicating its critical nature and the urgent need for remediation. Organizations using the affected versions are advised to update immediately to mitigate the risk of exploitation. The advisory has been released by GitHub, highlighting the urgency of the situation. As of now, there are no reports of active exploitation, but the potential for severe impact remains high. 2 sources 78

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

CWE-287 - Improper Authentication