CVEFinder.io

CVE-2026-59794

⚠️ high
πŸ” Scan for this CVE
Summary

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data

CVSS Score
7.3
High
EPSS Score
0.2
Exploit Probability
Published Date
2026-07-10
First Seen: 2026-07-11
πŸ“Š Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 54.6% of all 345,139 vulnerabilities in our database.

#156,606
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jul 10, 2026
πŸ” Exploitation Status
None
No known exploits
βš™οΈ Automatable
NO
Requires human interaction
πŸ’₯ Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-07-10
Source NVD πŸ”—
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
CWE IDs (Weakness Types)
CWE-79

πŸ“¦ Affected Products 1

Vendor Product Status Affected Versions
jetbrains teamcity Affected
< 2026.1.2

πŸ”— References 1

https://www.jetbrains.com/privacy-security/issues-fi...
Vendor Advisory

πŸ”— Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-63077 β›” critical 9.8 10.7 In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin... 2026-07-27
CVE-2026-65906 ⚠️ high 8.8 0.4 In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible 2026-07-23
CVE-2026-59793 ⚠️ high 8.8 0.3 In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration 2026-07-10
CVE-2026-59795 ⚠️ high 8.1 0.2 In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible 2026-07-10
CVE-2026-59796 ⚠️ high 8.1 0.3 In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks 2026-07-10
CVE-2026-49371 ⚠️ high 7.1 0.3 In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible 2026-05-29
These CVEs affect the same products