CyberSIXT Search
Original
Image: Security Affairs

Security AffairsPierluigi Paganini

JetBrains patches critical unauthenticated code flaw in TeamCity

Part of the CVE-2026-63077 story · 19 articles · 7 outlets · since 28 Jul

JetBrains has issued patches for a critical vulnerability in TeamCity, identified as CVE-2026-63077, which allows unauthenticated code execution on affected on-premise servers, posing severe security risks. The flaw has a CVSS score of 9.8 and impacts all on-premise versions, while cloud instances are safe. Users are urged to upgrade to versions 2025.11.7 or 2026.1.3. A security patch plugin is also available for those unable to upgrade immediately. JetBrains emphasizes the importance of securing TeamCity servers by limiting network access and employing additional security measures.

How the story developed

All 19 articles

19 articles from 6 outlets over 63 days. This was the first report.

19 articles from 6 outlets since 28 Jul; the latest 28 days ago.

CVE-2026-63077: coverage over time19 articles from 6 outlets. First report 28 Jul by Security Affairs. Busiest week: 10 articles, week of 3 Aug. 0 in the last 7 days. CVE-2026-63077: coverage over time19 articles from 6 outlets. First report 28 Jul by Security Affairs. Busiest week: 10 articles, week of 3 Aug. 0 in the last 7 days.
  • Article
  • First report
  • Official notice
Show as table
CVE-2026-63077: articles
Published (UTC)OutletHeadline
Mon 28 Sep · 14:30 UTCThe Hacker NewsHackers Exploit Citrix NetScaler Flaws as Forgotten Assets Fuel Attacks
Sat 5 Sep · 17:01 UTCThe Hacker NewsJetBrains Urges Cadence Users to Rotate Credentials After Breach
Mon 31 Aug · 04:11 UTCSecurityOnlineJetBrains breach leaks AWS keys via unpatched TeamCity flaw
Mon 24 Aug · 07:51 UTCSecurityOnlineCVE-2026-63077 lets attackers hijack JetBrains TeamCity servers
Mon 10 Aug · 02:29 UTCSecurityOnlineCVE-2026-63077 Flaw Lets Attackers Hijack JetBrains TeamCity
Fri 7 Aug · 18:52 UTCRapid7Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)
Fri 7 Aug · 03:41 UTCSecurityOnlineModel Kimi K3 Escapes Sandbox, Reaches GitHub via CVE-2026-63077
Thu 6 Aug · 10:11 UTCSecurityOnlineCVE-2026-63077: XCSSET malware targets macOS devs via Xcode
Thu 6 Aug · 09:32 UTCSecurity AffairsCISA puts TeamCity CVE-2026-63077 in KEV, mandates fix by August
Thu 6 Aug · 09:02 UTCThe Hacker NewsCISA warns of active TeamCity RCE flaw CVE-2026-63077
Thu 6 Aug · 06:42 UTCSecurityOnlineApple iCloud Private Relay bug leaks IP via WebKit CVE-2026-63077
Thu 6 Aug · 06:41 UTCSecurityWeekJetBrains patches TeamCity deserialization flaw after CISA alert
Thu 6 Aug · 03:21 UTCSecurityOnlineCISA adds TeamCity RCE flaw CVE-2026-63077 to KEV, patch by Aug 8
Wed 5 Aug · 19:23 UTCCISACISA adds JetBrains TeamCity RCE bug CVE-2026-63077 to KEV list
Wed 5 Aug · 18:31 UTCCISACISA flags critical JetBrains TeamCity flaw CVE‑2026‑63077 in KEV
Fri 31 Jul · 07:26 UTCSecurityWeekCritical Code Execution Vulnerability Patched in TeamCity
Wed 29 Jul · 17:31 UTCRapid7Serious JetBrains TeamCity Flaw Lets Attackers Run Code Remotely
Tue 28 Jul · 15:51 UTCSecurityOnlineTeamCity RCE Flaw CVE-2026-63077 (CVSS 9.8) Enables Unauthenticated Command Execution
Tue 28 Jul · 11:51 UTCSecurity AffairsJetBrains patches critical unauthenticated code flaw in TeamCity

Who reported 6 outlets

  • SecurityOnline8
  • The Hacker News3
  • Security Affairs2
  • Rapid72
  • SecurityWeek2
  • CISA2
See the full timeline
  1. JetBrains patches critical unauthenticated code flaw in TeamCitySecurity Affairs · first report · this article · 1 of 19

Sources

Original articlesecurityaffairs.comPrimary sourceblog.jetbrains.com

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device