CVE-2026-49374 HIGH

CVE-2026-49374

Vendor Jetbrains

Product TeamCity

Weakness CWE-862 · Missing authorization

Published May 29, 2026

Last update May 29, 2026

View on NVD All CVEs

CVSS base score

7.6/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters

Key dates

02Disclosure timeline

May 29, 2026 CVE published

May 29, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-49374 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/862.html

Related vulnerabilities

04Related CVE

CVE-2024-23518 WordPress ACF Photo Gallery Field plugin <= 2.6 - Broken Access Control vulnerability CVE-2025-11164 Mavix Education <= 1.0 - Missing Authorization to Authenticated (Subscriber+) 'Creativ Demo Importer' Plugin Activation CVE-2026-32562 WordPress PPWP plugin <= 1.9.15 - Broken Access Control vulnerability CVE-2026-32379 WordPress Rara Academic theme <= 1.2.2 - Broken Access Control vulnerability CVE-2025-13414 Chamber Dashboard Business Directory <= 3.3.11 - Missing Authorization to Unauthenticated Business Information Export