CVE-2026-63077

JetBrains TeamCity Vulnerability

JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.

CVSS Score

9.8

CRITICAL

Published

05 Aug 2026 00:00

Modified

N/A

Vendor

JetBrains

Product

TeamCity

Source

CIRCL

Affected Versions

Fix Vendor Patch / Mitigation Available

Weaknesses (CWE)

CWE-502

References

nvd.nist.gov /vuln/detail/CVE-2026-63077 cve.circl.lu /cve/CVE-2026-63077 cve.mitre.org /cgi-bin/cvename.cgi vuldb.com /

Affected Systems

JetBrains

TeamCity

JetBrains

TeamCity

External Links

NVD Database CIRCL CISA KEV

KEV Status

Known Exploited Vulnerability