51 matches found
CVE-2026-106218
In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible...
CVE-2026-106218
In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible...
EUVD-2026-93504
In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible...
CVE-2026-106218
JetBrains TeamCity versions prior to 2026.1.3 are vulnerable to a kotlin DSL sandbox escape (CWE-184). This flaw allows for Remote Code Execution (RCE) on the server. While the vulnerability is confirmed to exist, specific exploit details are not provided in the documents. Users should update to ...
CVE-2026-106218
In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible...
CVE-2026-106218: Incomplete List of Disallowed Inputs
In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible...
PT-2026-106801
Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1.3 Description A sandbox escape in the Kotlin DSL allows for remote code execution RCE on the server. This issue is caused by an incomplete list of disallowed inputs, which enables an attacker to bypa...
CVE-2026-100253
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL...
CVE-2026-100253
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL...
CVE-2026-100253
JetBrains TeamCity versions prior to 2026.2 , 2026.1.4 , and 2025.11.8 are vulnerable to a sandbox escape leading to code execution . The root cause is located within the versioned settings Kotlin DSL . No specific exploit details or in-the-wild exploitation information are provided in the docume...
EUVD-2026-89997
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL...
CVE-2026-100253
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL...
PT-2026-103300
Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.2 JetBrains TeamCity versions prior to 2026.1.4 JetBrains TeamCity versions prior to 2025.11.8 Description A sandbox escape allows for remote code execution through the versioned settings Kotlin DSL...
CVE-2026-100253: Incomplete List of Disallowed Inputs
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL...
JetBrains TeamCity < 2025.11.6 / 2026.1.x < 2026.1.2 Code Execution (CVE-2026-65906)
The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.6, or version 2026.1 up to but not including 2026.1.2. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution via Kotlin DSL sandbox escape was possible...
JetBrains TeamCity < 2018.2.3 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2018.2.3. It is, therefore, affected by multiple vulnerabilities: - A possible stored JavaScript injection requiring a deliberate server administrator action was detected. The issue was fixed in JetBrains TeamCity 2018.2.3...
JetBrains TeamCity < 2025.11.6 / 2026.x < 2026.1.2 Code Execution (CVE-2026-65907)
The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.6, or prior to 2026.1.2. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible CVE-2026-65907 Note that Nessus has not tested...
CVE-2026-65906
CVE-2026-65906 affects JetBrains TeamCity versions prior to 2026.1.2 and prior to 2025.11.6. The vulnerability enables remote code execution via a sandbox escape in the Kotlin DSL used for configuration. The root cause is a sandbox escape in the Kotlin DSL, allowing code execution with high impac...