Vulnerabilities in JetBrains TeamCity

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.8, CVEs: CVE-2026-100253, CVE-2026-100254, CVE-2026-100255, Summary: CVE-2026-100253 (CVSS: 8.8): In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL CVE-2026-100254 (CVSS: 8.8): In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF…

Číst originál na NCSC-FI →

CZ · EN/orig

JetBrains FI

tg: zranitelnost tp: identita

CVE v události 3

CVE	hodnocení	KEV	EPSS
CVE-2026-100253	8.8 3.1 · JetBrains	–	–
CVE-2026-100254	8.8 3.1 · JetBrains	–	–
CVE-2026-100255	8.1 3.1 · JetBrains	–	–

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.8.