CVEFinder.io

CVE-2026-59793

⚠️ high
πŸ” Scan for this CVE
Summary

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration

CVSS Score
8.8
High
EPSS Score
0.3
Exploit Probability
Published Date
2026-07-10
First Seen: 2026-07-11
πŸ“Š Relative Risk Intelligence

This CVE is High Risk - more severe than 80.9% of all 345,139 vulnerabilities in our database.

#65,987
Top 25% most severe
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jul 13, 2026
πŸ” Exploitation Status
None
No known exploits
βš™οΈ Automatable
NO
Requires human interaction
πŸ’₯ Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-07-14
Source NVD πŸ”—
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)
CWE-73

πŸ“¦ Affected Products 1

Vendor Product Status Affected Versions
jetbrains teamcity Affected
< 2026.1.2

πŸ”— References 1

https://www.jetbrains.com/privacy-security/issues-fi...
Vendor Advisory

πŸ”— Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-63077 β›” critical 9.8 10.7 In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin... 2026-07-27
CVE-2026-65906 ⚠️ high 8.8 0.4 In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible 2026-07-23
CVE-2026-59794 ⚠️ high 7.3 0.2 In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data 2026-07-10
CVE-2026-59795 ⚠️ high 8.1 0.2 In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible 2026-07-10
CVE-2026-59796 ⚠️ high 8.1 0.3 In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks 2026-07-10
CVE-2026-49371 ⚠️ high 7.1 0.3 In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible 2026-05-29
These CVEs affect the same products