www.cisa.gov 8/5/2026, 7:23:39 PM · external

CISA adds JetBrains TeamCity RCE bug CVE-2026-63077 to KEV list

Developing story vulnerability 7 articles tracked
JetBrains TeamCity deserialization flaw (CVE-2026-63077) allows unauthenticated RCE
CyberSIXT Evidence Panel
Primary Source blog.jetbrains.com
CISA KEV Listed in KEV
Patch Patch Available

THE Known Exploited Vulnerabilities (KEV) Catalog is maintained by CISA to assist organizations in managing cybersecurity vulnerabilities that are actively exploited. The catalog serves as a resource for prioritizing vulnerability management efforts. It includes details such as the CVE-2026-63077 vulnerability in JetBrains TeamCity, which allows unauthenticated remote code execution through deserialization of untrusted data.

Users are encouraged to apply mitigation strategies as provided by vendors and adhere to CISA's guidelines. The catalog is available in various formats, including CSV and JSON.

View Primary Source Via www.cisa.gov

Article by CyberSIXT

Timeline Coverage

Swipe to explore timeline