PT-2026-21906 · Jetbrains · Teamcity

Published 2026-02-25 · Updated 2026-02-25 · CVE-2026-28196

Positive Technologies (AI Summary)

CVSS v3.1

2.3

Low

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2025.11.3

Description A configuration issue in JetBrains TeamCity, specifically related to versioned settings, resulted in credentials being left on disk after disabling versioned settings. This could potentially allow unauthorized access to sensitive information.

Recommendations Update to TeamCity version 2025.11.3 or later.

Fix

Weakness Enumeration

CWE-459

Related Identifiers

BDU:2026-03522

CVE-2026-28196

Affected Products

Teamcity

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-28196 · Security Note
• https://bdu.fstec.ru/vul/2026-03522 · Security Note
• https://osv.dev/vulnerability/CVE-2026-28196 · Vendor Advisory
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://twitter.com/CVEnew/status/2026676418843914422 · Twitter Post