8.1
CVSS
In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks
Severity: HIGH
📦
teamcity
Vendor: jetbrains
Actively Exploited
3
CISA KEV List
PoC / Exploits
6
Code Available
Total RCEs
15
Remote Access
Total CVEs
361
Total Indexed
Avg. EPSS
3.87%
Exploit Prob.
Security Vulnerability Index
Page 1 / 37
8.1
CVSS
In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible
Severity: HIGH
7.3
CVSS
In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data
Severity: HIGH
8.8
CVSS
In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration
Severity: HIGH
3.4
CVSS
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
Severity: LOW
3.1
CVSS
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible
Severity: LOW
6.5
CVSS
In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names
Severity: MEDIUM
4.3
CVSS
In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion
Severity: MEDIUM
4.3
CVSS
In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters
Severity: MEDIUM
6.5
CVSS
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin
Severity: MEDIUM