AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-65906

JetBrains TeamCity: code injection

JetBrains

CVE-2026-65906 · Published Jul 23, 2026 · updated Aug 11, 2026

High8.8
Fix: upgrade to 2026.1.2 or later (2 fixed versions below)
JetBrains advisory

In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible

Affected versions

PackageAffectedFixed in
TeamCity
Product
< 2026.1.2, 2025.11.62026.1.2, 2025.11.6
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-94

More JetBrains advisories

All JetBrains
Critical 9.1Jul 23JetBrains TeamCity: code executionCVE-2026-65907fixed in 2026.1.2 +1High 8.6Jul 23JetBrains PyCharm: code executionCVE-2026-65908fixed in 2026.1.4 +1High 8.6Jul 23JetBrains IntelliJ IDEA: missing authorizationCVE-2026-64814fixed in 2026.2High 8.1Jul 23JetBrains IntelliJ IDEA: code injectionCVE-2026-64815fixed in 2026.2High 8.4Jul 23JetBrains WebStorm: code executionCVE-2026-64806fixed in 2026.2High 7.8Jul 23JetBrains WebStorm: code executionCVE-2026-64807fixed in 2026.2