Vulnerabilityhigh

JetBrains TeamCity vulnerability allows privilege escalation, API exposure (CVE-2026-44413)

Help Net Securityby @zeljkazorzMay 12, 2026 · 00:00 UTC (May 12, 2026)1 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2026-44413 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-44413 CVE-2023-42793 CVE-2024-27198 CVE-2024-27199

Tags: cve-2023-42793 cve-2024-27198 cve-2024-27199 cve-2026-44413 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-42793	Authentication bypass in JetBrains TeamCity enables unauthenticated RCE	9.8	100%	KEVRansomwarePoC ×2	Sep 19, 2023 KEV Oct 4, 2023
CVE-2024-27198 +1 related CVE CVE-2024-27199	Authentication Bypass in JetBrains TeamCity CI/CD Server	9.8 group max	100%	KEVRansomware	Mar 4, 2024 KEV Mar 7, 2024
CVE-2026-44413	In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access	7.5	<1%		May 11, 2026

From the original article

1 min read at helpnetsecurity.com

JetBrains has patched a high-severity vulnerability (CVE-2026-44413) in TeamCity, its popular continuous integration and continuous delivery platform, and is urging organizations with on-premises and self-managed deployments to upgrade to the fixed version or implement a security patch.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.