JetBrains CVEs

Showing 12 of 12

1. CVE-2026-111094CVSS 9.8 criticalEPSS 0.38%2026-10-15

   teamcity. In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the…

2. CVE-2026-106219CVSS 7.5 highEPSS 0.64%2026-10-06

   teamcity. In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local reposito…

3. CVE-2026-106218CVSS 10.0 criticalEPSS 0.28%2026-10-06

   teamcity. In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was po…

4. CVE-2026-100277CVSS 9.8 criticalEPSS 0.28%2026-09-30

   youtrack. In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature

5. CVE-2026-100276CVSS 7.5 highEPSS 0.22%2026-09-30

   youtrack. In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction…

6. CVE-2026-100273CVSS 9.8 criticalEPSS 0.30%2026-09-30

   youtrack. In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code…

7. CVE-2026-100262CVSS 7.1 highEPSS 0.21%2026-09-30

   youtrack. In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access t…

8. CVE-2026-100255CVSS 9.8 criticalEPSS 0.35%2026-09-30

   teamcity. In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via pass…

9. CVE-2026-63077CVSS 9.8 criticalEPSS 89.6%KEV2026-07-27

   TeamCity. JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

10. CVE-2024-27199CVSS 7.3 highEPSS 100%KEV2024-03-04

    TeamCity. JetBrains TeamCity Relative Path Traversal Vulnerability

11. CVE-2024-27198CVSS 9.8 criticalEPSS 100%KEV2024-03-04

    TeamCity. JetBrains TeamCity Authentication Bypass Vulnerability

12. CVE-2023-42793CVSS 9.8 criticalEPSS 100%KEV2023-09-19

    TeamCity. JetBrains TeamCity Authentication Bypass Vulnerability