Vulnerabilities

TI-2026-74812 CVE-2026-111096

Stored cross-site scripting in JetBrains TeamCity build log

LOW 31

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible

CVSS 3.1MEDIUM 6.7 Network Low privileges User interaction EPSS 0.00184 Published 2026-10-15 Fixed in 2026.2, 2026.1.4 +1 CWE-79

TI-2026-74811 CVE-2026-111095

LOW 36

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00169 Published 2026-10-15 Fixed in 2026.2, 2026.1.4 +1 CWE-79

TI-2026-74810 CVE-2026-111094

MEDIUM 43

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00392 Published 2026-10-15 Fixed in 2026.2, 2026.1.4 +1 CWE-502