Where
-Infinity
0

JetBrains TeamCityIn JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible …

Risk 86
Severity
9.8
First published (updated )

JetBrains TeamCityCode Injection

Risk 72
Severity
9.1
First published (updated )

JetBrains TeamCityCode Injection

Risk 79
Severity
8.8
First published (updated )

JetBrains TeamCityXSS

Risk 59
Severity
8.1
First published (updated )

JetBrains TeamCityIn JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission …

Risk 60
Severity
8.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

JetBrains TeamCityXSS

Risk 54
Severity
7.3
First published (updated )

JetBrains TeamCityIn JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integr…

Risk 79
Severity
8.8
First published (updated )

JetBrains TeamCityIn JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible

Risk 38
Severity
6.1
First published (updated )

JetBrains TeamCityXSS

Risk 29
Severity
4.8
First published (updated )

JetBrains TeamCityIn JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion

Risk 22
Severity
4.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

JetBrains TeamCityIn JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters

Risk 22
Severity
4.3
First published (updated )

JetBrains TeamCityIn JetBrains TeamCity before 2026.1 credentials could be exposed in thread names

Risk 38
Severity
6.5
First published (updated )

JetBrains TeamCity (SAML plugin)In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin

Risk 40
Severity
6.5
First published (updated )

JetBrains TeamCityXSS

Risk 38
Severity
6.1
First published (updated )

JetBrains TeamCityIn JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameter…

Risk 58
Severity
7.6
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

JetBrains TeamCitySSRF

Risk 43
Severity
7.5
First published (updated )

JetBrains TeamCityIn JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection setti…

Risk 79
Severity
8.8
First published (updated )

JetBrains TeamCityXSS

Risk 53
Severity
8.2
First published (updated )

JetBrains TeamCityIn JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unautho…

Risk 54
Severity
8.2
First published (updated )

JetBrains TeamCityIn JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on dis…

Risk 10
Severity
2.3
EPSS
0.00%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

JetBrains TeamCityIn JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow

Risk 27
Severity
6.1
EPSS
0.00%
First published (updated )

JetBrains TeamCityIn JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add param…

Risk 16
Severity
4.3
EPSS
0.00%
First published (updated )

JetBrains TeamCityXSS

Risk 38
Severity
6.1
First published (updated )

JetBrains TeamCityXSS

Risk 34
Severity
5.4
First published (updated )

JetBrains TeamCityIn JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub pers…

Risk 40
Severity
6.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

JetBrains TeamCityXSS

Risk 34
Severity
5.4
First published (updated )

JetBrains TeamCityIn JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test

Risk 16
Severity
2.7
First published (updated )

JetBrains TeamCityXSS

Risk 29
Severity
4.8
First published (updated )

JetBrains TeamCityIn JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configura…

Risk 16
Severity
2.7
First published (updated )

JetBrains TeamCityPath Traversal

Risk 43
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203