Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🟠 TeamCity (JetBrains TeamCity), SSRF (Server-Side Request Forgery), #CVE-2026-49372 (Medium) -DC-Jun2026-95 https://dailycve.com/teamcity-jetbrains-teamcity-ssrf-server-side-request-forgery-cve-2026-49372-medium-dc-jun2026-95/
Post summary
An article announces the SSL SSRF vulnerability CVE‑2026‑49372 in JetBrains TeamCity, providing basic technical details but no evidence of exploitation, PoC, or patch.
CVE-2026-49372 In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible https://www.cve.org/CVERecord?id=CVE-2026-49372
Post summary
The text announces CVE-2026-49372, an unauthenticated SSRF vulnerability in JetBrains TeamCity build status for versions before 2026.1 and 2025.11.5, without detailing PoCs, exploits, patches, or active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jetbrains | teamcity | - | - | - |