CVE-2026-111096: XSS
Published Oct 15, 2026
·Updated
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible
Affected Software
1 affected component
JetBrains TeamCity<2026.2, <2026.1.4, <2025.11.8
Event History
Oct 15, 2026
CVE Published
via MITRE·03:29 PM
Data Sourced
via MITRE·03:29 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which TeamCity installations need to be updated?
TeamCity versions before 2026.2, 2026.1.4, and 2025.11.8 are affected. Update to the applicable fixed release for your release branch.
2
What access and conditions are required for exploitation?
The vector is network-accessible, but exploitation has high attack complexity and requires low privileges and user interaction. The issue involves stored XSS in the classic build log.
3
What could successful exploitation affect?
The reported impact includes high confidentiality and integrity impact, with low availability impact. Scope is unchanged.