CVE-2026-28194: Medium severity JetBrains TeamCity vulnerability
Published Feb 25, 2026
·Updated
In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow
Affected Software
2 affected components
JetBrains TeamCity<2025.11.3
JetBrains TeamCity<2025.11.3
Event History
Feb 25, 2026
CVE Published
via MITRE·12:57 PM
Data Sourced
via MITRE·12:57 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-28194?
CVE-2026-28194 is classified as a moderate severity vulnerability due to its potential for exploitation via open redirect.
2
How do I fix CVE-2026-28194?
To fix CVE-2026-28194, upgrade JetBrains TeamCity to version 2025.11.3 or a later version where the vulnerability has been addressed.
3
Which versions of JetBrains TeamCity are affected by CVE-2026-28194?
CVE-2026-28194 affects all versions of JetBrains TeamCity prior to 2025.11.3.
4
What type of vulnerability is CVE-2026-28194?
CVE-2026-28194 is an open redirect vulnerability that occurs in the React project creation flow of JetBrains TeamCity.
5
Could CVE-2026-28194 lead to security issues?
Yes, CVE-2026-28194 could lead to phishing attacks or redirect users to malicious sites if exploited.