Veille CVE

Recherche « JetBrains TeamCity »

8 CVE

Critique 3 Élevée 3 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « JetBrains TeamCity » ✕
  1. CVE-2026-111096 5.4 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible

  2. CVE-2026-111095 5.4 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible

  3. CVE-2026-111094 9.8 Critique

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible

  4. CVE-2026-106219 7.5 Élevée

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server

  5. CVE-2026-106218 10.0 Critique

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible

  6. CVE-2026-100255 9.8 Critique

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset

  7. CVE-2026-100254 8.8 Élevée

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings

  8. CVE-2026-100253 8.8 Élevée

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL