CVE-2026-28195
In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations
Published Feb 25, 2026 · updated Jun 17, 2026 · jetbrains teamcity
In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Feb 25, 2026 · NIST NVD
Detected
In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations
Jun 17, 2026 · NIST NVD
Updated
In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations
Affected
- cpe jetbrains/teamcityversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-28195
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-28195
In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations
nvd.nist.gov