OCTOBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-111094

HIGH · CVSS 8.1 EPSS 0.38% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-10-15 · Last synced 2026-10-17

CyberRota Analysis

AI-Generated

JetBrains TeamCity versions prior to 2026.2, 2026.1.4, and 2025.11.8 are vulnerable to remote code execution due to a whitelist bypass in the build messages protocol. This flaw allows attackers to execute arbitrary code on the server, posing a significant risk to the integrity and confidentiality of the affected systems. Organizations using these versions should prioritize patching to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-111094
Severity
HIGH
CVSS
8.1
EPSS
0.38%

Original NVD Description

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-111096 MEDIUM CVE-2026-111095 HIGH CVE-2026-106219 MEDIUM CVE-2026-106218 HIGH CVE-2026-103497 MEDIUM CVE-2026-103496 MEDIUM