Known vulnerabilities in TeamCity 2026.1.1

Software: TeamCity
Version: 2026.1.1
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:teamcity:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting TeamCity version 2026.1.1 TeamCity 2026.1.1 is affected by 7 vulnerabilities: 1 critical, 3 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143858 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-65907
CWE-94 Medium
No
No
2025.11.6, 2026.1.2 17.08.2026 SB2026081797
#VU143857 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-65906
CWE-94 Medium
No
No
2025.11.6, 2026.1.2 17.08.2026 SB2026081797
#VU143845 - External Control of File Name or Path
CVE-2026-59793
CWE-73 Low
No
No
2026.1.2 17.08.2026 SB2026081797
#VU143844 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-59794
CWE-79 Low
No
No
2026.1.2 17.08.2026 SB2026081797
#VU143843 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-59795
CWE-79 Medium
No
No
2026.1.2 17.08.2026 SB2026081797
#VU143841 - Missing Authorization
CVE-2026-59796
CWE-862 Low
No
No
2026.1.2 17.08.2026 SB2026081797
#VU140627 - Deserialization of Untrusted Data
CVE-2026-63077
CWE-502 Critical
Public exploit available
Exploited
2025.11.7, 2026.1.3 27.07.2026 SB20260731170