CVE-2026-44413CWE-306

In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access

High · published May 11, 2026

CVSS v3.1
8.2
EPSS
0%
Percentile
25.7
In the wild
Unconfirmed
What it is

In JetBrains TeamCity before 2026.1

2025.11.5 authenticated users could expose server API to unauthorised access

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00335 · 25.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-05-11T17:42Z
EPSS history
Timeline
  • 11 MAY 17:42Z
    In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access
    cvelistv5