PT-2026-21904 · Jetbrains · Jetbrains Teamcity+1

Published 2026-02-25 · Updated 2026-02-25 · CVE-2026-28194

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2025.11.3

Description An open redirect issue existed in the React project creation flow. This allowed for potential redirection to malicious websites.

Recommendations Update JetBrains TeamCity to version 2025.11.3 or later.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2026-03520

CVE-2026-28194

Affected Products

Jetbrains Teamcity

Teamcity

References · 5

• https://bdu.fstec.ru/vul/2026-03520 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-28194 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28194 · Security Note
• https://twitter.com/CVEnew/status/2026676420488081816 · Twitter Post