Total
283 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-44413 | 1 Jetbrains | 1 Teamcity | 2026-10-26 | N/A | 8.2 HIGH |
| In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access | |||||
| CVE-2026-59793 | 1 Jetbrains | 1 Teamcity | 2026-10-24 | N/A | 8.8 HIGH |
| In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration | |||||
| CVE-2026-59794 | 1 Jetbrains | 1 Teamcity | 2026-10-24 | N/A | 7.3 HIGH |
| In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data | |||||
| CVE-2026-59796 | 1 Jetbrains | 1 Teamcity | 2026-10-24 | N/A | 8.1 HIGH |
| In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks | |||||
| CVE-2026-59795 | 1 Jetbrains | 1 Teamcity | 2026-10-24 | N/A | 8.1 HIGH |
| In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible | |||||
| CVE-2026-63077 | 1 Jetbrains | 1 Teamcity | 2026-10-24 | N/A | 9.8 CRITICAL |
| In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol | |||||
| CVE-2026-65906 | 1 Jetbrains | 1 Teamcity | 2026-10-24 | N/A | 8.8 HIGH |
| In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible | |||||
| CVE-2026-111096 | 1 Jetbrains | 1 Teamcity | 2026-10-16 | N/A | 6.7 MEDIUM |
| In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible | |||||
| CVE-2026-111095 | 1 Jetbrains | 1 Teamcity | 2026-10-16 | N/A | 8.0 HIGH |
| In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible | |||||
| CVE-2026-111094 | 1 Jetbrains | 1 Teamcity | 2026-10-16 | N/A | 8.1 HIGH |
| In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible | |||||
| CVE-2026-106218 | 1 Jetbrains | 1 Teamcity | 2026-10-08 | N/A | 8.8 HIGH |
| In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible | |||||
| CVE-2026-106219 | 1 Jetbrains | 1 Teamcity | 2026-10-08 | N/A | 6.5 MEDIUM |
| In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server | |||||
| CVE-2025-67741 | 1 Jetbrains | 1 Teamcity | 2026-10-07 | N/A | 4.6 MEDIUM |
| In JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute | |||||
| CVE-2025-67740 | 1 Jetbrains | 1 Teamcity | 2026-10-07 | N/A | 2.7 LOW |
| In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata | |||||
| CVE-2025-67739 | 1 Jetbrains | 1 Teamcity | 2026-10-07 | N/A | 3.1 LOW |
| In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure | |||||
| CVE-2025-67742 | 1 Jetbrains | 1 Teamcity | 2026-10-07 | N/A | 3.8 LOW |
| In JetBrains TeamCity before 2025.11 path traversal was possible via file upload | |||||
| CVE-2026-100254 | 1 Jetbrains | 1 Teamcity | 2026-10-06 | N/A | 8.8 HIGH |
| In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings | |||||
| CVE-2026-100253 | 1 Jetbrains | 1 Teamcity | 2026-10-06 | N/A | 8.8 HIGH |
| In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL | |||||
| CVE-2026-100255 | 1 Jetbrains | 1 Teamcity | 2026-10-02 | N/A | 8.1 HIGH |
| In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset | |||||
| CVE-2026-49380 | 1 Jetbrains | 1 Teamcity | 2026-07-22 | N/A | 3.1 LOW |
| In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible | |||||