Vulnerabilidades do Jetbrains Teamcity
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Jetbrains Teamcity: 44 registro(s), com versões afetadas e correções.cpe:2.3:a:jetbrains:teamcity
CVE-2026-111096
Média · 6.7
CWE-79 15/10/2026
Cross-site Scripting (XSS) em Jetbrains Teamcity
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 stored XSS in the classic build log was possible
CVE-2026-111095
Alta · 8.0
CWE-79 15/10/2026
Cross-site Scripting (XSS) em Jetbrains Teamcity
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 stored XSS in the classic project overview was possible
CVE-2026-111094
Alta · 8.1
CWE-502 15/10/2026
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 remote code execution via a whitelist...
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible
CVE-2026-106219
Alta · 7.5
CWE-73 06/10/2026
In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed…
In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server
CVE-2026-106218
Crítica · 10.0
CWE-184 06/10/2026
In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE…
In JetBrains TeamCity before 2026.1.3
2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible
CVE-2026-100255
Crítica · 9.8
CWE-1289 30/09/2026
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover…
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 administrator account takeover was possible via password reset
CVE-2026-100254
Alta · 8.8
CWE-78 30/09/2026
OS Command Injection em Jetbrains Teamcity
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings
CVE-2026-100253
Alta · 8.8
CWE-184 30/09/2026
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code…
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL
CVE-2026-63077
Crítica · 9.8
KEV Urgente · 93 Exploit público Ransomware CWE-502 27/07/2026
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
CVE-2026-65907
Crítica · 9.1
CWE-94 23/07/2026
Code Injection em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible
CVE-2026-65906
Crítica · 10.0
CWE-94 23/07/2026
Code Injection em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible
CVE-2026-59796
Alta · 8.1
CWE-862 10/07/2026
Missing Authorization em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks
CVE-2026-59795
Média · 6.1
CWE-79 10/07/2026
Cross-site Scripting (XSS) em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible
CVE-2026-59794
Média · 5.4
CWE-79 10/07/2026
Cross-site Scripting (XSS) em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data
CVE-2026-59793
Alta · 8.8
CWE-73 10/07/2026
In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the…
In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration
CVE-2026-49381
Média · 4.8
CWE-79 29/05/2026
Cross-site Scripting (XSS) em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
CVE-2026-49380
Média · 6.1
CWE-601 29/05/2026
Open Redirect em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible
CVE-2026-49379
Média · 6.5
CWE-522 29/05/2026
Insufficiently Protected Credentials em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names
CVE-2026-49378
Média · 4.3
CWE-862 29/05/2026
Missing Authorization em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion
CVE-2026-49377
Média · 4.3
CWE-526 29/05/2026
In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent…
In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters
CVE-2026-49376
Média · 6.5
CWE-863 29/05/2026
Incorrect Authorization em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin
CVE-2026-49375
Média · 6.1
CWE-79 29/05/2026
Cross-site Scripting (XSS) em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1,
2025.11.5 reflected XSS was possible on the repository download page
CVE-2026-49374
Alta · 7.6
CWE-862 29/05/2026
Missing Authorization em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters
CVE-2026-49373
Alta · 8.8
CWE-88 29/05/2026
Argument Injection em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings
CVE-2026-49372
Alta · 7.5
CWE-918 29/05/2026
Server-Side Request Forgery (SSRF) em Jetbrains Teamcity
In JetBrains TeamCity before 2026.1,
2025.11.5 unauthenticated SSRF via build status was possible