CVE-2026-100255

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@jetbrains.com

Published

2026-09-30

Last modified

2026-10-02

Weaknesses

CWE-1289

Affected products

• Teamcity (Jetbrains)

References

• https://www.jetbrains.com/privacy-security/issues-fixed/