TI-2026-36554 CVE-2026-49381 · GHSA-mhr7-j6qx-58mw
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
Priority LOW 21
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
Vulnerabilities
7 records
TI-2026-36553 CVE-2026-49380 · GHSA-wcfj-vvvg-4x96
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible
Priority LOW 26
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible
TI-2026-36552 CVE-2026-49379 · GHSA-pwcg-7wj6-m8gv
In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names
Priority LOW 28
In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names
TI-2026-36551 CVE-2026-49378 · GHSA-pg2h-77h8-9m6v
In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion
Priority LOW 19
In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion
TI-2026-36549 CVE-2026-49376 · GHSA-qhvc-3ggx-6rj7
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin
Priority LOW 34
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin
TI-2026-36547 CVE-2026-49374 · GHSA-pqrm-v5f6-j44f
In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters
Priority LOW 33
In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters
TI-2026-36546 CVE-2026-49373 · GHSA-hqxf-vmvp-qr3c
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings
Priority HIGH 65
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings