jetbrains / teamcity
13 known vulnerabilities in jetbrains teamcity.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-63077 | Act now | 86.5% | 9.8 | ● | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code exe… |
| CVE-2026-49373 | Medium | 27.1% | 7.1 | In JetBrains TeamCity before 2026.1 remote code execution was possible via Perfo… | |
| CVE-2026-65906 | Medium | 0.5% | 8.8 | In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL s… | |
| CVE-2026-49372 | Medium | 0.3% | 7.5 | In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build st… | |
| CVE-2026-49371 | Medium | 0.3% | 7.1 | In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was po… | |
| CVE-2026-49374 | Medium | 0.2% | 7.6 | In JetBrains TeamCity before 2026.1 improper permission checks exposed build con… | |
| CVE-2026-49377 | Low | 0.7% | 4.3 | In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default ag… | |
| CVE-2026-49379 | Low | 0.3% | 6.5 | In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names | |
| CVE-2026-49375 | Low | 0.2% | 6.1 | In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on th… | |
| CVE-2026-49378 | Low | 0.2% | 4.3 | In JetBrains TeamCity before 2026.1 credentials parameters were exposed via para… | |
| CVE-2026-49376 | Low | 0.2% | 6.5 | In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML… | |
| CVE-2026-49381 | Low | 0.2% | 3.4 | In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possib… | |
| CVE-2026-49380 | Low | 0.2% | 3.1 | In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possibl… |