Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2860▼ 165 respecto a la semana anterior
Críticas / altas1382▲ 50 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)272▼ 254 respecto a la semana anterior
–

279 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaCrítica (9.8)0.35%—Jetbrains Teamcity30/9/20262/10/2026
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset
En análisisAlta (8.8)0.46%—Jetbrains TeamcityAI30/9/20261/10/2026
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings
En análisisAlta (8.8)0.43%—Jetbrains TeamcityAI30/9/20261/10/2026
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL
AnalizadaCrítica (9.8)90%⚠ Explotación activaJetbrains Teamcity27/7/20266/8/2026
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
En análisisCrítica (9.1)0.66%—Jetbrains TeamcityAI23/7/202624/7/2026
In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible
AnalizadaCrítica (10)0.66%—Jetbrains Teamcity23/7/202611/8/2026
In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible
AnalizadaAlta (8.1)0.35%—Jetbrains Teamcity10/7/202614/7/2026
In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks
AnalizadaMedia (6.1)0.34%—Jetbrains Teamcity10/7/202613/7/2026
In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible
AnalizadaMedia (5.4)0.32%—Jetbrains Teamcity10/7/202610/7/2026
In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data
AnalizadaAlta (8.8)0.49%—Jetbrains Teamcity10/7/202614/7/2026
In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration
AnalizadaMedia (4.8)0.29%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
AnalizadaMedia (6.1)0.23%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible
AnalizadaMedia (6.5)0.34%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names
AnalizadaMedia (4.3)0.29%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion
AnalizadaMedia (4.3)0.92%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters
AnalizadaMedia (6.5)0.29%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin
AnalizadaMedia (6.1)0.30%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page
AnalizadaAlta (7.6)0.31%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters
AnalizadaAlta (8.8)0.60%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings
AnalizadaAlta (7.5)0.39%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible
AnalizadaAlta (8.2)0.35%—Jetbrains Teamcity29/5/202622/7/2026
In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible
AnalizadaAlta (7.5)0.34%—Jetbrains Teamcity11/5/202617/6/2026
In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access
AnalizadaBaja (2.3)0.17%—Jetbrains Teamcity25/2/202617/6/2026
In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk
AnalizadaMedia (4.3)0.26%—Jetbrains Teamcity25/2/202617/6/2026
In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations
AnalizadaMedia (6.1)0.29%—Jetbrains Teamcity25/2/202617/6/2026
In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow