CVE-2026-100255
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset
- Published Sep 30, 2026
- CVSS 9.8 critical
- 0.4% chance of exploitation in the next 30 days (EPSS)
- A fix is available