High WID-SEC-2026-3986 3 CVEs

JetBrains TeamCity: Mehrere Schwachstellen

Published Oct 15, 2026 · Updated Oct 15, 2026 · de-DE

Vendor: JetBrains Product: TeamCity Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in JetBrains TeamCity ausnutzen, um beliebigen Programmcode auszuführen, und um einen Cross-Site Scripting Angriff durchzuführen.

Product

TeamCity ist ein Continuous Integration und Deployment Tool für Entwickler und DevOps Ingenieure.

Vulnerabilities 3

High 8.1

CVE-2026-111094

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build mess…

JetBrains TeamCity

Oct 15, 2026
High 8.0

CVE-2026-111095

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible

JetBrains TeamCity

Oct 15, 2026
Medium 6.7

CVE-2026-111096

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible

JetBrains TeamCity

Oct 15, 2026

Revision history

2026-10-15 #1
Initiale Fassung

References

GitHub Security Advisory GHSA-x7hh-wg8w-g7jc vom 2026-10-15
https://github.com/advisories/GHSA-x7hh-wg8w-g7jc
GitHub Security Advisory GHSA-x7hh-wg8w-g7jc vom 2026-10-15
https://github.com/advisories/GHSA-2583-66QV-349R
GitHub Security Advisory GHSA-x7hh-wg8w-g7jc vom 2026-10-15
https://github.com/advisories/GHSA-6RGG-93WJ-XQQM
JetBrains Fixed security issues vom 2026-10-15
https://www.jetbrains.com/privacy-security/issues-fixed/
National Vulnerability Database CVE-2026-111094 vom 2026-10-15
https://nvd.nist.gov/vuln/detail/CVE-2026-111094
National Vulnerability Database CVE-2026-111095 vom 2026-10-15
https://nvd.nist.gov/vuln/detail/CVE-2026-111095
National Vulnerability Database CVE-2026-111096 vom 2026-10-15
https://nvd.nist.gov/vuln/detail/CVE-2026-111096