High WID-SEC-2026-2288 4 CVEs

JetBrains TeamCity: Mehrere Schwachstellen

Published Jul 12, 2026 · Updated Jul 12, 2026 · de-DE

Vendor: JetBrains Product: TeamCity Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in JetBrains TeamCity ausnutzen, um beliebigen Programmcode auszuführen, Daten zu manipulieren oder Cross-Site-Scripting-Angriffe durchzuführen.

Product

TeamCity ist ein Continuous Integration und Deployment Tool für Entwickler und DevOps Ingenieure.

Vulnerabilities 4

High 8.8

CVE-2026-59793

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration

JetBrains TeamCity

Jul 10, 2026
High 8.1

CVE-2026-59795 Public exploit

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

JetBrains TeamCity

Jul 10, 2026
High 8.1

CVE-2026-59796

In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks

JetBrains TeamCity

Jul 10, 2026
High 7.3

CVE-2026-59794

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data

JetBrains TeamCity

Jul 10, 2026

Revision history

2026-07-12 #1
Initiale Fassung

References

JetBrains Fixed security issues vom 2026-07-12
https://www.jetbrains.com/privacy-security/issues-fixed/
National Vulnerability Database CVE-2026-59793 vom 2026-07-12
https://nvd.nist.gov/vuln/detail/CVE-2026-59793
National Vulnerability Database CVE-2026-59794 vom 2026-07-12
https://nvd.nist.gov/vuln/detail/CVE-2026-59794
National Vulnerability Database CVE-2026-59795 vom 2026-07-12
https://nvd.nist.gov/vuln/detail/CVE-2026-59795
National Vulnerability Database CVE-2026-59796 vom 2026-07-12
https://nvd.nist.gov/vuln/detail/CVE-2026-59796