AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-59794

JetBrains TeamCity: cross-site scripting

JetBrains

CVE-2026-59794 · Published Jul 10, 2026

High7.3
Fix: upgrade to 2026.1.2 or later
JetBrains advisory

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data

Affected versions

PackageAffectedFixed in
TeamCity
Product
< 2026.1.22026.1.2
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-79

More JetBrains advisories

All JetBrains
Low 3.5Jul 10JetBrains YouTrack: cross-site scriptingCVE-2026-61492fixed in 2026.2.17394Low 3.5Jul 10JetBrains YouTrack: clickjackingCVE-2026-59791fixed in 2026.2.17012Critical 9.6Jul 10JetBrains IntelliJ IDEA: code execution via path traversalCVE-2026-59792fixed in 2026.1.4 +1High 8.8Jul 10In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via...CVE-2026-59793fixed in 2026.1.2High 8.1Jul 10JetBrains TeamCity: cross-site scriptingCVE-2026-59795fixed in 2026.1.2High 8.1Jul 10JetBrains TeamCity: insecure permissionsCVE-2026-59796fixed in 2026.1.2