Vulnerabilities

TI-2026-42618 CVE-2026-59796 · GHSA-6wf4-qp9f-c3xh

In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks

LOW 37

In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0035 Published 2026-07-10 Fixed in 2026.1.2 CWE-862

TI-2026-42617 CVE-2026-59795 · GHSA-ch3x-q6cp-54rw

LOW 37

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00417 Published 2026-07-10 Fixed in 2026.1.2 CWE-79

TI-2026-42616 CVE-2026-59794 · GHSA-5526-463r-44x5

LOW 34

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00335 Published 2026-07-10 Fixed in 2026.1.2 CWE-79

TI-2026-42615 CVE-2026-59793 · GHSA-j8x6-f4hm-gpqh

MEDIUM 41

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0049 Published 2026-07-10 Fixed in 2026.1.2 CWE-73