anonhaven

CVE-2026-111095

HIGH CVSS 3.1: 5.4 EPSS 0.17%
Updated Oct 16, 2026
Jetbrains
Parameter Value
CVSS 5.4 (HIGH)
Affected Versions 2026.1 — 2026.1.4
Fixed In 2025.11.8
Type CWE-79 (Cross-Site Scripting (XSS))
Vendor Jetbrains
Public PoC No

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
Required
User action required

Impact Assessment

Confidentiality
Low
Partial data leak
Integrity
Low
Partial data modification
Availability
None
No disruption

CVSS Vector v3.1

Weakness Type (CWE)

CWE-79 Cross-Site Scripting (XSS)

Vulnerable Products 2

Configuration From (including) Up to (excluding)
Jetbrains Teamcity
cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*
 — 2025.11.8
Jetbrains Teamcity
cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*
 2026.1 2026.1.4

References 1

https://www.jetbrains.com/privacy-security/issues-fixed/
cve@jetbrains.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-111096

Jetbrains

5.4

CVE-2026-111094

Jetbrains

9.8

CVE-2026-106219

Jetbrains

7.5

CVE-2026-106218

Jetbrains

10.0

CVE-2026-103497

GitHub

5.5