CVE-2026-111096

JetBrains TeamCity versions prior to 2026.2, 2026.1.4, and 2025.11.8 are vulnerable to stored cross-site scripting (XSS) in the classic build log, allowing attackers to inject malicious scripts that could execute in the context of users accessing the logs. This vulnerability poses a medium severity risk, as it could lead to unauthorized actions or data exposure for users with access to the affected logs. Organizations using these versions should prioritize patching to mitigate potential exploitation risks.