VULNERABILITY INTELLIGENCE
CVE-2026-63077
CVSS score9.8 CRITICAL
EPSS probability93.56%
CISA KEVKnown exploited vulnerability
Published2026-07-27
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
Vendor / product: JetBrains / TeamCity
Description
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
Weakness classification
- cve@jetbrains.com: CWE-502
Primary references
- cve@jetbrains.com — Vendor Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource