Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-63077KEVexploit ×8 | 9.8 critical | 94.0% | jetbrains, teamcity | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol | Sat 24 Oct |
| CVE-2026-65906 | 10.0 critical | 1.0% | jetbrains, teamcity | In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible | Sat 24 Oct |
| CVE-2026-65907 | 9.1 critical | 1.0% | no CPE yet | In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible | Sat 24 Oct |
| CVE-2026-106219 | 7.5 high | 1.0% | jetbrains, teamcity | In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server | 8 Oct |
| CVE-2026-106218 | 10.0 critical | 0.00% | jetbrains, teamcity | In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible | 8 Oct |
| CVE-2026-111094 | 9.8 critical | 0.00% | jetbrains, teamcity | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible | 16 Oct |
| CVE-2026-59793 | 8.8 high | 0.00% | jetbrains, teamcity | In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration | Sat 24 Oct |
| CVE-2026-59796 | 8.1 high | 0.00% | jetbrains, teamcity | In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks | Sat 24 Oct |
| CVE-2026-44413 | 7.5 high | 0.00% | jetbrains, teamcity | In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access | Mon 26 Oct |
| CVE-2026-59795 | 6.1 medium | 0.00% | jetbrains, teamcity | In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible | Sat 24 Oct |
| CVE-2026-59794 | 5.4 medium | 0.00% | jetbrains, teamcity | In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data | Sat 24 Oct |
| CVE-2026-111096 | 5.4 medium | 0.00% | jetbrains, teamcity | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible | 16 Oct |
| CVE-2026-111095 | 5.4 medium | 0.00% | jetbrains, teamcity | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible | 16 Oct |
13 of 13
Download these 13 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.