JetBrains · Code execution
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings
At a glance
Elevated attack likelihood (~24.9% in 30 days). Exploitation not confirmed.
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
- Do not treat uncorroborated claims as confirmed breaches.
Questions to ask IT
- Do we run JetBrains TeamCity, and is every instance on version 2026.1 or later?
- If it is not yet patched, what mitigation is in place, and will the fix be done by 29 Nov?
Next steps
- Confirm whether this affects systems or suppliers in your estate
Vulnerability facts
Full CVE detail CVE-2026-49373- 7.1 · HighExploitable over the network with a low-privilege account, and no one has to click or open anything. High impact on confidentiality; low on integrity.CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- Not listed
- Elevated attack likelihood (~24.9% in 30 days)
- Before 2026.1
- 2026.1
Versions are as the CVE record states them; check the vendor advisory before planning a fix.
No technical write-up beyond these facts and the summary below yet.
Next steps
- Review the advisory against your asset inventory and patch cadence
Summary
- CVE-2026-49373 has an estimated ~24.9% chance of attack in 30 days (97.9th percentile) as of 2026-10-25 — probability signal, not confirmed exploitation
Products and services involved
- JetBrains TeamCity90% match confidence · CVE-2026-49373
Pulse
Last checked 30 Oct · Recheck overdue since 31 Oct 2026, 04:05 UK time
- Story26 Oct 2026, 08:07 UK time · 26 Oct
Linked reporting from (official standard body).
Read source (FIRST EPSS) - Update30 Oct 2026, 04:05 UK time · 30 Oct
held at 24.9%; ranking metadata was updated.
2 entries so far. The timeline chart appears once this story has more history.
Sources
CVE-2026-49373: elevated exploitation probability
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings
- ProbableSummary fact75% confidence
CVE-2026-49373 has an estimated attack likelihood score of 0.249 (~24.9% estimated chance of exploitation in the next 30 days; 97.9th percentile) as of 2026-10-25. This is a probability signal from FIRST, not confirmed exploitation.
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-49373
- ConfirmedEstimated attack likelihood95% confidence
CVE-2026-49373 has an estimated ~24.9% chance of attack in 30 days (97.9th percentile) as of 2026-10-25 — probability signal, not confirmed exploitation