CVE-2026-111095

JetBrains TeamCity versions prior to 2026.2, 2026.1.4, and 2025.11.8 are vulnerable to stored cross-site scripting (XSS) in the classic project overview, allowing attackers to inject malicious scripts that can execute in the context of users accessing the affected interface. This vulnerability poses a significant risk as it can lead to unauthorized actions or data exposure for users. Organizations using these versions should prioritize patching to mitigate potential exploitation.