CVE-2026-49375NVD

In JetBrains TeamCity before 2026.1,
2025.11.5 reflected XSS was possible on the repository download page

Severity Level

MEDIUM(6.1)

Published Date

May 29, 2026

Last Modified

Jun 2, 2026

Exploitation Status

????

EPSS Score (30-Day)

0.13%Probability

Root Weakness (CWE)

The software does not neutralize user-controllable input before it is placed in output that is used as a web page.

CVSS v3.1 Base Metrics

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionRequired

ScopeChanged

ConfidentialityLow

IntegrityLow

AvailabilityNone

CVE Watchtower