CVE-2026-100253

HighCVSS 8.8/10Last modified Oct 6, 2026

Description

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-184

Affected software

No affected versions have been published.

Timeline

Published
Sep 30, 2026
Last modified
Oct 6, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-1002548.8In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection CVE-2026-1002559.8In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password resetCVE-2026-1002567.8In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projectsCVE-2026-1002574.3In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF exportCVE-2026-1002584.3In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settingsCVE-2026-1002594.3In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only accessCVE-2026-100267.2The CTX Feed Pro plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 7.6.12. This is due to insufficiCVE-2026-1002605.3In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password resetCVE-2026-1002615.4In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permissionCVE-2026-1002627.1In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notificatioCVE-2026-1002636.1In JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was possibleCVE-2026-1002642.7In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host
CVE-2026-100253: High severity, CVSS 8.8 | Vulnix