CVE Catalog

CVE-2026-65907

CriticalCVSS 9.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.42%

34th percentile - higher than 34% of all known CVEs

Summary

In JetBrains TeamCity before 2026.1.2 and 2025.11.6, code execution in Git VCS roots was possible.

Risk Assessment

An attacker with access to VCS configuration can remotely execute arbitrary code on the TeamCity server, leading to full system compromise.

Recommendation

Update JetBrains TeamCity to version 2026.1.2, 2025.11.6 or later.

Original NVD description (English source)

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible

Vulnerability data from NVD (NIST) · CISA KEV · EPSS