Type Vulnerability
CVE-2026-49373 has an estimated attack likelihood score of 0.249 (~24.9% estimated chance of exploitation in the next 30 days; 97.9th percentile) as of 2026-10-25.
JetBrains · Code execution
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings
CVE-2026-49373
What this means
This is rated high severity (7.1 out of 10). Current estimates put the chance of attack in the next 30 days at roughly 25%. Ask IT whether Jetbrains Teamcity is in your estate, and treat that as the priority.
Full vendor description
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings
Scoring and exploitation
7.1/ 10
CVSS 3.1 base scoreHigh
Exploitable over the network with a low-privilege account, and no one has to click or open anything. High impact on confidentiality; low on integrity.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Exploitability
Longer bar: easier to attack
Attack vectorNetworkAV:N
Attack complexityLowAC:L
Privileges requiredLowPR:L
User interactionNoneUI:N
ScopeUnchangedS:U
Impact
Longer bar: more harm
ConfidentialityHighC:H
IntegrityLowI:L
AvailabilityNoneA:N
- Elevated attack likelihood (~24.9% in 30 days)Model estimate (): a probability signal, not confirmed exploitation
- Exploited in the wild
- Not confirmed in the
- Not reported
Weaknesses
CWE-88
Affected products ()
- Jetbrains Teamcity
Show the raw CPE strings (1)
- cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*
References
1 link from the CVE record, grouped by site; the vendor's advisory comes first.
jetbrains.com1 linkVendor advisory
- issues-fixed (opens in a new tab)Vendor Advisory