CVE Catalog
CVE-2026-49380
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.16%
6th percentile - higher than 6% of all known CVEs
Summary
In JetBrains TeamCity before 2026.1, the SAML plugin allows an open redirect, which can be used for phishing attacks.
Risk Assessment
Open redirect may allow an attacker to redirect users to a malicious site, increasing the risk of credential theft.
Recommendation
Update JetBrains TeamCity to version 2026.1 or later.
Original NVD description (English source)
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible