EIP-2026-104100

PRE-CVE

TeamCity < 9.0.2 - Disabled Registration Bypass

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-104100. PoCs published by allyshka.

AI-analyzed exploit summary This JavaScript code demonstrates an authentication bypass vulnerability by crafting a malicious registration request with encrypted credentials. It exploits a flaw in the user registration process, likely allowing unauthorized account creation or privilege escalation.

Description

TeamCity < 9.0.2 - Disabled Registration Bypass

Exploits (1)

exploitdb WORKING POC
by allyshka · javascriptremotemultiple
https://www.exploit-db.com/exploits/46514

This JavaScript code demonstrates an authentication bypass vulnerability by crafting a malicious registration request with encrypted credentials. It exploits a flaw in the user registration process, likely allowing unauthorized account creation or privilege escalation.

Classification
Working Poc 80%
Attack Type
Auth Bypass
Complexity
Moderate
Reliability
Reliable
Target: Unknown (likely a web application using BS framework)
No auth needed
Prerequisites: Access to the registration endpoint · Valid public key for encryption
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026