{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: JetBrains vulnerabilities","home_page_url":"https://patchfirst.co/vendor/jetbrains/","feed_url":"https://patchfirst.co/feed/vendor/jetbrains.json","description":"New and newly exploited JetBrains CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-111094","url":"https://patchfirst.co/cve/CVE-2026-111094/","title":"CVE-2026-111094: In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build…","content_text":"JetBrains · TeamCity. Not in CISA KEV. EPSS 0.4% (higher than 33.3% of CVEs). CVSS 9.8 CRITICAL. Priority 15.7 of 100.","summary":"In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build…","date_published":"2026-10-15T00:00:00.000Z","date_modified":"2026-10-16T19:19:17.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.7,"kev":null,"epss":{"score":0.00392,"percentile":0.33313},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"JetBrains","product":"TeamCity","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-108474","url":"https://patchfirst.co/cve/CVE-2026-108474/","title":"CVE-2026-108474: In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions","content_text":"JetBrains · Exposed. Not in CISA KEV. EPSS 0.3% (higher than 24.9% of CVEs). CVSS 9.8 CRITICAL. Priority 14.3 of 100.","summary":"In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions","date_published":"2026-10-10T00:00:00.000Z","date_modified":"2026-10-14T16:08:15.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.3,"kev":null,"epss":{"score":0.0032,"percentile":0.2495},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"JetBrains","product":"Exposed","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-106218","url":"https://patchfirst.co/cve/CVE-2026-106218/","title":"CVE-2026-106218: In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible","content_text":"JetBrains · TeamCity. Not in CISA KEV. EPSS 0.3% (higher than 24.9% of CVEs). CVSS 10.0 CRITICAL. Priority 14.2 of 100.","summary":"In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-08T14:53:05.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.2,"kev":null,"epss":{"score":0.00319,"percentile":0.24933},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"JetBrains","product":"TeamCity","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-63077#kev","url":"https://patchfirst.co/cve/CVE-2026-63077/","title":"[KEV] CVE-2026-63077: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability","content_text":"JetBrains · TeamCity. In CISA KEV since 2026-08-05, known ransomware use. ENISA EUVD lists it as exploited. EPSS 93.6% (higher than 99.84% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 89.8 of 100.","summary":"JetBrains TeamCity Deserialization of Untrusted Data Vulnerability","date_published":"2026-08-05T00:00:00.000Z","date_modified":"2026-10-24T13:10:00.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":89.8,"kev":{"dateAdded":"2026-08-05","ransomware":true},"epss":{"score":0.93558,"percentile":0.99841},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"JetBrains","product":"TeamCity","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-27199#kev","url":"https://patchfirst.co/cve/CVE-2024-27199/","title":"[KEV] CVE-2024-27199: JetBrains TeamCity Relative Path Traversal Vulnerability","content_text":"JetBrains · TeamCity. In CISA KEV since 2026-04-20, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 7.3 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 78.1 of 100.","summary":"JetBrains TeamCity Relative Path Traversal Vulnerability","date_published":"2026-04-20T00:00:00.000Z","date_modified":"2026-06-17T07:19:25.000Z","tags":["kev","ransomware","public-exploit","T1190","T1078"],"_patchfirst":{"reason":"kev","priority":78.1,"kev":{"dateAdded":"2026-04-20","ransomware":true},"epss":{"score":0.99991,"percentile":0.99985},"cvss":{"score":7.3,"severity":"HIGH","version":"3.1"},"vendor":"JetBrains","product":"TeamCity","techniqueIds":["T1190","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-46618","url":"https://patchfirst.co/cve/CVE-2025-46618/","title":"CVE-2025-46618: In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab","content_text":"JetBrains · TeamCity. Not in CISA KEV. EPSS 63.0% (higher than 99.2% of CVEs). CVSS 3.5 LOW. Priority 22.3 of 100.","summary":"In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab","date_published":"2025-04-25T00:00:00.000Z","date_modified":"2025-04-25T15:26:24.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.3,"kev":null,"epss":{"score":0.63034,"percentile":0.99199},"cvss":{"score":3.5,"severity":"LOW","version":"3.1"},"vendor":"JetBrains","product":"TeamCity","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-31138","url":"https://patchfirst.co/cve/CVE-2024-31138/","title":"CVE-2024-31138: In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings","content_text":"JetBrains · TeamCity. Not in CISA KEV. EPSS 74.7% (higher than 99.5% of CVEs). CVSS 4.6 MEDIUM. Priority 23.1 of 100.","summary":"In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings","date_published":"2024-03-28T00:00:00.000Z","date_modified":"2024-08-02T01:46:04.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.1,"kev":null,"epss":{"score":0.74689,"percentile":0.99501},"cvss":{"score":4.6,"severity":"MEDIUM","version":"3.1"},"vendor":"JetBrains","product":"TeamCity","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-27198#kev","url":"https://patchfirst.co/cve/CVE-2024-27198/","title":"[KEV] CVE-2024-27198: JetBrains TeamCity Authentication Bypass Vulnerability","content_text":"JetBrains · TeamCity. In CISA KEV since 2024-03-07, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.9 of 100.","summary":"JetBrains TeamCity Authentication Bypass Vulnerability","date_published":"2024-03-07T00:00:00.000Z","date_modified":"2026-06-17T07:19:24.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":79.9,"kev":{"dateAdded":"2024-03-07","ransomware":true},"epss":{"score":0.99938,"percentile":0.99971},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"JetBrains","product":"TeamCity","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-23917","url":"https://patchfirst.co/cve/CVE-2024-23917/","title":"CVE-2024-23917: In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible","content_text":"JetBrains · TeamCity. Not in CISA KEV. EPSS 54.0% (higher than 99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 67.3 of 100.","summary":"In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible","date_published":"2024-02-06T00:00:00.000Z","date_modified":"2024-08-01T23:13:08.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":67.3,"kev":null,"epss":{"score":0.54009,"percentile":0.99002},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"JetBrains","product":"TeamCity","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-42793#kev","url":"https://patchfirst.co/cve/CVE-2023-42793/","title":"[KEV] CVE-2023-42793: JetBrains TeamCity Authentication Bypass Vulnerability","content_text":"JetBrains · TeamCity. In CISA KEV since 2023-10-04, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.003 Windows Command Shell. Priority 79.9 of 100.","summary":"JetBrains TeamCity Authentication Bypass Vulnerability","date_published":"2023-10-04T00:00:00.000Z","date_modified":"2026-06-17T06:24:31.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059.003"],"_patchfirst":{"reason":"kev","priority":79.9,"kev":{"dateAdded":"2023-10-04","ransomware":true},"epss":{"score":0.99987,"percentile":0.99983},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"JetBrains","product":"TeamCity","techniqueIds":["T1190","T1059.003"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-41249","url":"https://patchfirst.co/cve/CVE-2023-41249/","title":"CVE-2023-41249: In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step","content_text":"JetBrains · TeamCity. Not in CISA KEV. EPSS 55.5% (higher than 99.03% of CVEs). CVSS 4.6 MEDIUM. Priority 23.0 of 100.","summary":"In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step","date_published":"2023-08-25T00:00:00.000Z","date_modified":"2024-09-27T21:56:50.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23,"kev":null,"epss":{"score":0.55527,"percentile":0.99035},"cvss":{"score":4.6,"severity":"MEDIUM","version":"3.1"},"vendor":"JetBrains","product":"TeamCity","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-34220","url":"https://patchfirst.co/cve/CVE-2023-34220/","title":"CVE-2023-34220: In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible","content_text":"JetBrains · TeamCity. Not in CISA KEV. EPSS 61.4% (higher than 99.16% of CVEs). CVSS 4.6 MEDIUM. Priority 23.1 of 100.","summary":"In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible","date_published":"2023-05-31T00:00:00.000Z","date_modified":"2025-01-09T20:03:26.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.1,"kev":null,"epss":{"score":0.61433,"percentile":0.99163},"cvss":{"score":4.6,"severity":"MEDIUM","version":"3.1"},"vendor":"JetBrains","product":"TeamCity","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-34225","url":"https://patchfirst.co/cve/CVE-2023-34225/","title":"CVE-2023-34225: In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible","content_text":"JetBrains · TeamCity. Not in CISA KEV. EPSS 60.7% (higher than 99.15% of CVEs). CVSS 4.6 MEDIUM. Priority 23.0 of 100.","summary":"In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible","date_published":"2023-05-31T00:00:00.000Z","date_modified":"2025-01-09T20:31:09.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23,"kev":null,"epss":{"score":0.6072,"percentile":0.99146},"cvss":{"score":4.6,"severity":"MEDIUM","version":"3.1"},"vendor":"JetBrains","product":"TeamCity","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2022-48428","url":"https://patchfirst.co/cve/CVE-2022-48428/","title":"CVE-2022-48428: In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible","content_text":"JetBrains · TeamCity. Not in CISA KEV. EPSS 68.0% (higher than 99.32% of CVEs). CVSS 4.6 MEDIUM. Priority 23.1 of 100.","summary":"In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible","date_published":"2023-03-27T00:00:00.000Z","date_modified":"2025-02-19T16:05:55.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.1,"kev":null,"epss":{"score":0.6796,"percentile":0.99321},"cvss":{"score":4.6,"severity":"MEDIUM","version":"3.1"},"vendor":"JetBrains","product":"TeamCity","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2022-48343","url":"https://patchfirst.co/cve/CVE-2022-48343/","title":"CVE-2022-48343: In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process","content_text":"JetBrains · TeamCity. Not in CISA KEV. EPSS 59.5% (higher than 99.12% of CVEs). CVSS 5.4 MEDIUM. Priority 23.6 of 100.","summary":"In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process","date_published":"2023-02-23T00:00:00.000Z","date_modified":"2025-03-11T18:13:25.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.6,"kev":null,"epss":{"score":0.59462,"percentile":0.99121},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"JetBrains","product":"TeamCity","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}