CVEFinder.io

CVE-2026-49371

⚠️ high
πŸ” Scan for this CVE
Summary

In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible

CVSS Score
7.1
High
EPSS Score
0.3
Exploit Probability
Published Date
2026-05-29
First Seen: 2026-05-30
πŸ“Š Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 52.5% of all 345,139 vulnerabilities in our database.

#163,957
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 29, 2026
πŸ” Exploitation Status
None
No known exploits
βš™οΈ Automatable
NO
Requires human interaction
πŸ’₯ Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2026-07-22
Source NVD πŸ”—
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
CWE IDs (Weakness Types)
CWE-79

πŸ“¦ Affected Products 1

Vendor Product Status Affected Versions
jetbrains teamcity Affected
< 2026.1.1

πŸ”— References 1

https://www.jetbrains.com/privacy-security/issues-fi...
Vendor Advisory

πŸ”— Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-63077 β›” critical 9.8 10.7 In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin... 2026-07-27
CVE-2026-65906 ⚠️ high 8.8 0.4 In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible 2026-07-23
CVE-2026-59793 ⚠️ high 8.8 0.3 In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration 2026-07-10
CVE-2026-59794 ⚠️ high 7.3 0.2 In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data 2026-07-10
CVE-2026-59795 ⚠️ high 8.1 0.2 In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible 2026-07-10
CVE-2026-59796 ⚠️ high 8.1 0.3 In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks 2026-07-10
These CVEs affect the same products