CVE-2026-25846 is a medium severity vulnerability in JetBrains YouTrack prior to version 2025.3.119033 where access tokens could be exposed in mailbox logs. This exposure stems from improper handling of sensitive information (CWE-532), potentially allowing attackers with network access and low privileges to obtain tokens without user interaction. While the vulnerability does not impact integrity or availability, the confidentiality breach could enable unauthorized access to YouTrack resources. No known exploits are currently reported in the wild. European organizations using affected YouTrack versions should prioritize updating to the patched release to prevent token leakage. Mitigation involves upgrading YouTrack, auditing mailbox logs for token exposure, and restricting log access. Countries with significant JetBrains YouTrack adoption, such as Germany, France, and the UK, are most likely to be impacted due to their large software development sectors. The vulnerability’s CVSS score of 6.
CVE-2025-68166 is a medium-severity DOM-based Cross-Site Scripting (XSS) vulnerability affecting JetBrains TeamCity versions prior to 2025.11. The flaw exists on the OAuth connections tab, where untrusted input is improperly handled, allowing an attacker to execute arbitrary scripts in the context of the victim's browser. Exploitation requires user interaction but no authentication, and can lead to limited confidentiality and integrity impacts without affecting availability. No known exploits are currently reported in the wild. European organizations using TeamCity for continuous integration and deployment could face targeted attacks leveraging this vulnerability, especially those with public-facing or internally accessible TeamCity instances. Mitigation involves updating to the fixed version 2025.11 once available and implementing strict input validation and Content Security Policies. Countries with significant software development sectors and high adoption of JetBrains tools, such as Germany, France, and the UK, are most likely to be affected. Given the medium CVSS score of 5.
CVE-2025-68165 is a reflected Cross-Site Scripting (XSS) vulnerability in JetBrains TeamCity versions prior to 2025.11, specifically affecting the VCS Root setup interface. This vulnerability allows an unauthenticated attacker to inject malicious scripts that execute in the context of a victim's browser when they interact with the vulnerable page, requiring user interaction but no privileges. The CVSS score is 5.4 (medium severity), reflecting limited confidentiality and integrity impact without affecting availability. No known exploits are currently in the wild, and no patches have been linked yet. European organizations using TeamCity for continuous integration and deployment may face risks of session hijacking, credential theft, or further exploitation via this vulnerability. Mitigation involves applying vendor patches once available, implementing strict input validation and output encoding on VCS Root setup parameters, and restricting access to TeamCity interfaces. Countries with significant software development sectors and high adoption of JetBrains products, such as Germany, France, and the UK, are most likely to be affected. Given the medium severity and the requirement for user interaction, defenders should prioritize monitoring and timely patching to reduce exposure.
CVE-2025-68164 is a low-severity information disclosure vulnerability in JetBrains TeamCity versions prior to 2025.11. It allows an authenticated user with high privileges to perform port enumeration via the Perforce connection test feature. The vulnerability does not impact integrity or availability and requires no user interaction beyond authentication. There are no known exploits in the wild, and no patches have been published yet. The CVSS score is 2.7, reflecting limited confidentiality impact and the need for privileged access. European organizations using TeamCity, especially those integrating Perforce for version control, should be aware of this issue. Mitigation involves restricting high-privilege access, monitoring usage of the Perforce connection test, and applying patches once available. Countries with significant software development sectors and JetBrains customer bases, such as Germany, France, and the UK, are more likely to be affected.
CVE-2025-68163 is a stored Cross-Site Scripting (XSS) vulnerability in JetBrains TeamCity versions prior to 2025.11, specifically on the agentpushInstall page. The vulnerability allows an attacker with high privileges and requiring user interaction to inject malicious scripts that are stored and executed in the context of other users. The CVSS score is 3.5 (low severity) due to the requirement of privileges and user interaction, and the limited impact on confidentiality and integrity. No known exploits are currently in the wild. European organizations using TeamCity should be aware of this vulnerability and apply updates once available. The threat primarily affects development and CI/CD environments where TeamCity is deployed. Mitigation involves restricting access to the affected page, monitoring for suspicious activity, and applying patches when released. Countries with significant software development sectors and high adoption of JetBrains tools, such as Germany, France, and the UK, are more likely to be impacted.
CVE-2025-68162 is a low-severity vulnerability in JetBrains TeamCity versions before 2025.11, involving the Maven embedder's ability to load extensions via project configuration. This CWE-829 weakness allows an attacker with high privileges to load potentially malicious extensions, leading to integrity impacts without affecting confidentiality or availability. Exploitation requires authenticated access with high privileges and no user interaction. Although the CVSS score is low (2.7), the vulnerability could allow unauthorized modification of build processes or configurations. No known exploits are currently reported in the wild. European organizations using TeamCity for CI/CD pipelines should review their access controls and update to the fixed version once available. Countries with significant software development industries and widespread TeamCity adoption are more likely to be impacted. Mitigations include restricting high privilege accounts, auditing project configurations, and monitoring for unusual extension loads.
