JetBrains Software Vulnerabilities Impact TeamCity
ID: 3518e5ba-38e6-531f-9730-854a8e9f4e36
STIX ID: report--3518e5ba-38e6-531f-9730-854a8e9f4e36
Feed Name: securityonline.info
Threat Score
Three critical JetBrains vulnerabilities (CVE-2026-108474, CVE-2026-106219, CVE-2026-106218) affect the Exposed framework and TeamCity, enabling unauthenticated SQL injection, disclosure of local repositories via crafted Git submodule URLs, and a Kotlin DSL sandbox escape that can result in arbitrary code execution; administrators should apply patches immediately (Exposed 1.5.1, TeamCity 2026.2.1 / 2026.1.3 / 2025.11.7) — no public exploitation has been confirmed.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.