CVE-2026-111096

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.2 JetBrains TeamCity version 2026.1.4 JetBrains TeamCity version 2025.11.8

Description Stored Cross-Site Scripting (XSS) is possible within the classic build log. Stored XSS occurs when an application receives data from a user and includes that data within its later HTTP responses in an unsafe way, allowing a malicious script to be permanently stored on the server.

Recommendations Update JetBrains TeamCity to version 2026.2 or later. Update JetBrains TeamCity to a version newer than 2026.1.4. Update JetBrains TeamCity to a version newer than 2025.11.8.