Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5589 articles · 220728 vulns · 37/41 feeds (7d)
← Back to list
9.8
CVE-2026-63077KEVEXPLOITEDPATCHED
jetbrains · teamcity

CVE-2026-63077: In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin

Description

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

Affected Products

VendorProductVersions
jetbrainsteamcity0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
jetbrainsteamcitycert_advisory90%

References

  • https://www.jetbrains.com/privacy-security/issues-fixed/
  • https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-63077.yaml(exploit, nuclei)

Related News (13 articles)

Tier D
The Hacker News16d ago
Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
→ No new info (linked only)
Tier B
CERT-FR43d ago
Bulletin d'actualité CERTFR-2026-ACT-034 (10 août 2026)
→ No new info (linked only)
Tier C
Rapid7 Blog45d ago
Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)
→ No new info (linked only)
Tier D
The Hacker News47d ago
CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild
→ No new info (linked only)
Tier D
CSO Online53d ago
JetBrains says a crafted HTTP request could break TeamCity
→ No new info (linked only)
Tier D
SecurityWeek53d ago
Critical Code Execution Vulnerability Patched in TeamCity 
→ No new info (linked only)
Tier D
BleepingComputer53d ago
JetBrains warns of critical TeamCity remote code execution flaw
→ No new info (linked only)
Tier C
Rapid7 Blog54d ago
CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity
→ No new info (linked only)
Tier D
Heise Security55d ago
Kritische Schwachstelle in JetBrains TeamCity entdeckt
→ No new info (linked only)
Tier D
Help Net Security56d ago
JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)
→ No new info (linked only)
Tier B
BSI Advisories56d ago
[NEU] [hoch] JetBrains TeamCity: Schwachstelle ermöglicht Codeausführung
→ No new info (linked only)
Tier D
The Hacker News56d ago
Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In
→ No new info (linked only)
Tier C
VulDB56d ago
CVE-2026-63077 | JetBrains TeamCity prior 2026.1.3/2025.11.7 Agent Polling Protocol code injection
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.8 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA KEV✅ Yes
Actively exploited✅ Yes
Patch available
2026.1.32025.11.7
CWECWE-502
PublishedJul 27, 2026
Last enriched56d ago
Trending Score16
Source articles13
Independent10
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-86478
CVE-2026-86478: In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthent
Trending: 12
CRITICALCVE-2026-86480
CVE-2026-86480: In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser pri
Trending: 9
HIGHCVE-2026-86482
CVE-2026-86482: In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation
Trending: 9
HIGHCVE-2026-86479
CVE-2026-86479: In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restric
Trending: 9
HIGHCVE-2026-86504
CVE-2026-86504: In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed ho
Trending: 9

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jul 27, 2026
Added to CISA KEV
Jul 27, 2026
Discovered by ZDM
Jul 27, 2026
Actively Exploited
Aug 6, 2026
Exploit Available
Aug 6, 2026
Patch Available
Aug 6, 2026