Advisories · Technology

JetBrains TeamCity.

Every CVE that names JetBrains TeamCity among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111096 CVE record

CVSS 6.7 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-111095 CVE record

CVSS 8.0 High

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-111094 CVE record

CVSS 8.1 High

Deserialization of untrusted data in JetBrains TeamCity
- JetBrains TeamCity
- Insecure deserialization
Not analysed yet 15 Oct 2026
CVE-2026-106219 CVE record

CVSS 6.5 Medium

External control of a file path in JetBrains TeamCity
- JetBrains TeamCity
- Path traversal
Not analysed yet 6 Oct 2026
CVE-2026-106218 CVE record

CVSS 8.8 High

JetBrains TeamCity: In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE…
- JetBrains TeamCity
- CWE-184
Not analysed yet 6 Oct 2026
CVE-2026-100255 CVE record

CVSS 8.1 High

JetBrains TeamCity: In JetBrains TeamCity before 2026.2, 2026.1.4…
- JetBrains TeamCity
- CWE-1289
Not analysed yet 30 Sept 2026
CVE-2026-100254 CVE record

CVSS 8.8 High

OS command injection in JetBrains TeamCity
- JetBrains TeamCity
- Command injection
Not analysed yet 30 Sept 2026
CVE-2026-100253 CVE record

CVSS 8.8 High

JetBrains TeamCity: In JetBrains TeamCity before 2026.2, 2026.1.4…
- JetBrains TeamCity
- CWE-184
Not analysed yet 30 Sept 2026
CVE-2026-63077 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Deserialization of untrusted data in JetBrains TeamCity
- JetBrains TeamCity
- Insecure deserialization
Not analysed yet 27 Jul 2026
CVE-2026-65907 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Code injection in JetBrains TeamCity
- JetBrains TeamCity
- Code injection
Not analysed yet 23 Jul 2026
CVE-2026-65906 CVE record

CVSS 8.8 High

Code injection in JetBrains TeamCity
- JetBrains TeamCity
- Code injection
Not analysed yet 23 Jul 2026
CVE-2026-59796 CVE record

CVSS 8.1 High

Missing authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 10 Jul 2026
CVE-2026-59795 CVE record

CVSS 8.1 High

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 10 Jul 2026
CVE-2026-59794 CVE record

CVSS 7.3 High

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 10 Jul 2026
CVE-2026-59793 CVE record

CVSS 8.8 High

External control of a file path in JetBrains TeamCity
- JetBrains TeamCity
- Path traversal
Not analysed yet 10 Jul 2026
CVE-2026-49381 CVE record

CVSS 3.4 Low

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 29 May 2026
CVE-2026-49380 CVE record

CVSS 3.1 Low

Open redirect in JetBrains TeamCity
- JetBrains TeamCity
- Open redirect
Not analysed yet 29 May 2026
CVE-2026-49379 CVE record

CVSS 6.5 Medium

Insufficiently protected credentials in JetBrains TeamCity
- JetBrains TeamCity
- Hard-coded credentials
Not analysed yet 29 May 2026
CVE-2026-49378 CVE record

CVSS 4.3 Medium

Missing authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 29 May 2026
CVE-2026-49377 CVE record

CVSS 4.3 Medium

In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters
- JetBrains TeamCity
- CWE-526
Not analysed yet 29 May 2026
CVE-2026-49376 CVE record

CVSS 6.5 Medium

Incorrect authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 29 May 2026
CVE-2026-49375 CVE record

CVSS 6.1 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 29 May 2026
CVE-2026-49374 CVE record

CVSS 7.6 High

Missing authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 29 May 2026
CVE-2026-49373 CVE record

CVSS 7.1 HighCritical · CVSS 7+ and EPSS

Argument injection in JetBrains TeamCity
- JetBrains TeamCity
- Command injection
Not analysed yet 29 May 2026
CVE-2026-49372 CVE record

CVSS 7.5 High

Server-side request forgery in JetBrains TeamCity
- JetBrains TeamCity
- Server-side request forgery (SSRF)
Not analysed yet 29 May 2026
CVE-2026-49371 CVE record

CVSS 7.1 High

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 29 May 2026
CVE-2026-44413 CVE record

CVSS 8.2 High

Missing authentication in JetBrains TeamCity
- JetBrains TeamCity
- Authentication bypass
Not analysed yet 11 May 2026
CVE-2026-28196 CVE record

CVSS 2.3 Low

Incomplete cleanup in JetBrains TeamCity
- JetBrains TeamCity
- CWE-459
Not analysed yet 25 Feb 2026
CVE-2026-28195 CVE record

CVSS 4.3 Medium

Missing authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 25 Feb 2026
CVE-2026-28194 CVE record

CVSS 4.3 Medium

Open redirect in JetBrains TeamCity
- JetBrains TeamCity
- Open redirect
Not analysed yet 25 Feb 2026
CVE-2025-68268 CVE record

CVSS 5.4 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 16 Dec 2025
CVE-2025-68267 CVE record

CVSS 6.5 Medium

JetBrains TeamCity: In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing…
- JetBrains TeamCity
- CWE-272
Not analysed yet 16 Dec 2025
CVE-2025-68166 CVE record

CVSS 5.4 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 16 Dec 2025
CVE-2025-68165 CVE record

CVSS 5.4 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 16 Dec 2025
CVE-2025-68164 CVE record

CVSS 2.7 Low

Observable discrepancy in JetBrains TeamCity
- JetBrains TeamCity
- Information disclosure
Not analysed yet 16 Dec 2025
CVE-2025-68163 CVE record

CVSS 3.5 Low

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 16 Dec 2025
CVE-2025-68162 CVE record

CVSS 2.7 Low

JetBrains TeamCity: In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via…
- JetBrains TeamCity
- CWE-829
Not analysed yet 16 Dec 2025
CVE-2025-67742 CVE record

CVSS 3.8 Low

Path traversal in JetBrains TeamCity
- JetBrains TeamCity
- Path traversal
Not analysed yet 11 Dec 2025
CVE-2025-67741 CVE record

CVSS 4.8 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 11 Dec 2025
CVE-2025-67740 CVE record

CVSS 2.7 Low

Incorrect authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 11 Dec 2025
CVE-2025-67739 CVE record

CVSS 3.1 Low

JetBrains TeamCity: In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to…
- JetBrains TeamCity
- CWE-939
Not analysed yet 11 Dec 2025
CVE-2025-59457 CVE record

CVSS 7.7 High

JetBrains TeamCity: In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential…
- JetBrains TeamCity
- CWE-183
Not analysed yet 17 Sept 2025
CVE-2025-59456 CVE record

CVSS 5.5 Medium

Path traversal in JetBrains TeamCity
- JetBrains TeamCity
- Path traversal
Not analysed yet 17 Sept 2025
CVE-2025-59455 CVE record

CVSS 4.2 Medium

Race condition in JetBrains TeamCity
- JetBrains TeamCity
- Race condition
Not analysed yet 17 Sept 2025
CVE-2025-57734 CVE record

CVSS 4.3 Medium

In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script files
- JetBrains TeamCity
- Information disclosure
Not analysed yet 20 Aug 2025
CVE-2025-57733 CVE record

CVSS 5.5 Medium

Command injection in JetBrains TeamCity
- JetBrains TeamCity
- Command injection
Not analysed yet 20 Aug 2025
CVE-2025-57732 CVE record

CVSS 7.5 High

JetBrains TeamCity: In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect…
- JetBrains TeamCity
- CWE-282
Not analysed yet 20 Aug 2025
CVE-2025-54538 CVE record

CVSS 5.5 Medium

Cleartext storage of sensitive information in JetBrains TeamCity
- JetBrains TeamCity
- Information disclosure
Not analysed yet 28 Jul 2025
CVE-2025-54537 CVE record

CVSS 5.5 Medium

Cleartext storage of sensitive information in JetBrains TeamCity
- JetBrains TeamCity
- Information disclosure
Not analysed yet 28 Jul 2025
CVE-2025-54536 CVE record

CVSS 5.4 Medium

Cross-site request forgery in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site request forgery (CSRF)
Not analysed yet 28 Jul 2025
CVE-2025-54535 CVE record

CVSS 5.8 Medium

Weak hash in JetBrains TeamCity
- JetBrains TeamCity
- Weak cryptography or TLS
Not analysed yet 28 Jul 2025
CVE-2025-54534 CVE record

CVSS 4.8 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 28 Jul 2025
CVE-2025-54533 CVE record

CVSS 4.3 Medium

Incorrect authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 28 Jul 2025
CVE-2025-54532 CVE record

CVSS 4.3 Medium

Incorrect authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 28 Jul 2025
CVE-2025-54531 CVE record

CVSS 7.7 High

Path traversal in JetBrains TeamCity
- JetBrains TeamCity
- Path traversal
Not analysed yet 28 Jul 2025
CVE-2025-54530 CVE record

CVSS 7.5 High

Incorrect default permissions in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 28 Jul 2025
CVE-2025-54529 CVE record

CVSS 3.7 Low

Cross-site request forgery in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site request forgery (CSRF)
Not analysed yet 28 Jul 2025
CVE-2025-54528 CVE record

CVSS 5.4 Medium

Cross-site request forgery in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site request forgery (CSRF)
Not analysed yet 28 Jul 2025
CVE-2025-52879 CVE record

CVSS 4.8 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 23 Jun 2025
CVE-2025-52878 CVE record

CVSS 4.3 Medium

Missing authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 23 Jun 2025