CyberSIXT Search
JetBrains product

TeamCity

← All JetBrains products

No CISA KEV deadline is open. CISA last added a TeamCity CVE on 5 Aug.

Tracked since 7 Apr · latest article Sat 10 Oct · RSS

Added to KEV · 90 days
1
of 4 in the full CISA catalogue · all time
High exploit odds · current
0
EPSS top 5%, not in KEV
Articles · 7 days
0
none this week

Exploited, by due date

CSV download
CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2026-63077TeamCity5 AugDeadline passed 8 AugKnown ransomware use · 19 articles
CVE-2024-27199TeamCity20 AprDeadline passed 4 MayKnown ransomware use · 5 articles
CVE-2024-27198TeamCity7 Mar 2024Deadline passed 28 Mar 2024Known ransomware use · 1 article
CVE-2023-42793not in CyberSIXT coverageTeamCity4 Oct 2023Deadline passed 25 Oct 2023Known ransomware use

Coverage

26 articles · all timeFull timeline

26 articles from 7 outlets since 7 Apr; the latest 16 days ago.

TeamCity: coverage over time26 articles from 7 outlets. First report 7 Apr by Dark Reading. Busiest week: 10 articles, week of 3 Aug. 0 in the last 7 days. TeamCity: coverage over time26 articles from 7 outlets. First report 7 Apr by Dark Reading. Busiest week: 10 articles, week of 3 Aug. 0 in the last 7 days.
  • Article
  • First report
  • Official notice
Show as table
TeamCity: articles
Published (UTC)OutletHeadline
Sat 10 Oct · 09:30 UTCSecurityOnlineJetBrains Patches Exposed SQL Injection and TeamCity Code Execution Flaws
Mon 28 Sep · 14:30 UTCThe Hacker NewsHackers Exploit Citrix NetScaler Flaws as Forgotten Assets Fuel Attacks
Sat 5 Sep · 17:01 UTCThe Hacker NewsJetBrains Urges Cadence Users to Rotate Credentials After Breach
Mon 31 Aug · 04:11 UTCSecurityOnlineJetBrains breach leaks AWS keys via unpatched TeamCity flaw
Mon 24 Aug · 07:51 UTCSecurityOnlineCVE-2026-63077 lets attackers hijack JetBrains TeamCity servers
Mon 10 Aug · 02:29 UTCSecurityOnlineCVE-2026-63077 Flaw Lets Attackers Hijack JetBrains TeamCity
Fri 7 Aug · 18:52 UTCRapid7Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)
Fri 7 Aug · 03:41 UTCSecurityOnlineModel Kimi K3 Escapes Sandbox, Reaches GitHub via CVE-2026-63077
Thu 6 Aug · 10:11 UTCSecurityOnlineCVE-2026-63077: XCSSET malware targets macOS devs via Xcode
Thu 6 Aug · 09:32 UTCSecurity AffairsCISA puts TeamCity CVE-2026-63077 in KEV, mandates fix by August
Thu 6 Aug · 09:02 UTCThe Hacker NewsCISA warns of active TeamCity RCE flaw CVE-2026-63077
Thu 6 Aug · 06:42 UTCSecurityOnlineApple iCloud Private Relay bug leaks IP via WebKit CVE-2026-63077
Thu 6 Aug · 06:41 UTCSecurityWeekJetBrains patches TeamCity deserialization flaw after CISA alert
Thu 6 Aug · 03:21 UTCSecurityOnlineCISA adds TeamCity RCE flaw CVE-2026-63077 to KEV, patch by Aug 8
Wed 5 Aug · 19:23 UTCCISACISA adds JetBrains TeamCity RCE bug CVE-2026-63077 to KEV list
Wed 5 Aug · 18:31 UTCCISACISA flags critical JetBrains TeamCity flaw CVE‑2026‑63077 in KEV
Fri 31 Jul · 07:26 UTCSecurityWeekCritical Code Execution Vulnerability Patched in TeamCity
Wed 29 Jul · 17:31 UTCRapid7Serious JetBrains TeamCity Flaw Lets Attackers Run Code Remotely
Tue 28 Jul · 15:51 UTCSecurityOnlineTeamCity RCE Flaw CVE-2026-63077 (CVSS 9.8) Enables Unauthenticated Command Execution
Tue 28 Jul · 11:51 UTCSecurity AffairsJetBrains patches critical unauthenticated code flaw in TeamCity
Tue 21 Apr · 11:31 UTCSecurityWeekCISA Adds Cisco SD WAN, Zimbra XSS Flaws to KEV Catalog
Tue 21 Apr · 10:21 UTCSecurity AffairsCISA adds weaponised PaperCut, TeamCity flaws to KEV catalog
Tue 21 Apr · 07:32 UTCThe Hacker NewsCISA adds eight KEV flaws, Cisco SDWAN bugs actively exploited
Tue 21 Apr · 00:59 UTCCISACISA Adds Critical JetBrains TeamCity Flaw to KEV Catalogue
Tue 21 Apr · 00:34 UTCCISACISA Adds Critical JetBrains TeamCity Flaw to KEV Catalogue
Tue 7 Apr · 21:02 UTCDark ReadingStorm-1175 Deploys Medusa Ransomware at 'High Velocity'

Who reported 7 outlets, last 12 months

  • SecurityOnline9
  • CISA4
  • The Hacker News4
  • Security Affairs3
  • SecurityWeek3
  • Rapid72
  • Dark Reading1
  1. JetBrains Patches Exposed SQL Injection and TeamCity Code Execution FlawsSecurityOnline
  2. Hackers Exploit Citrix NetScaler Flaws as Forgotten Assets Fuel AttacksThe Hacker News
  3. JetBrains Urges Cadence Users to Rotate Credentials After BreachThe Hacker News
  4. JetBrains breach leaks AWS keys via unpatched TeamCity flawSecurityOnline
  5. CVE-2026-63077 lets attackers hijack JetBrains TeamCity serversSecurityOnline
  6. CVE-2026-63077 Flaw Lets Attackers Hijack JetBrains TeamCitySecurityOnline
  7. Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)Rapid7
  8. Model Kimi K3 Escapes Sandbox, Reaches GitHub via CVE-2026-63077SecurityOnline
  9. CVE-2026-63077: XCSSET malware targets macOS devs via XcodeSecurityOnline
  10. CISA puts TeamCity CVE-2026-63077 in KEV, mandates fix by AugustSecurity Affairs

All CVEs in coverage

5
CVE-2024-27199JetBrains TeamCity Relative Path Traversal VulnerabilityCVSS7.3HighExploited99.9%EPSS5articles
CVE-2024-27198JetBrains TeamCity Authentication Bypass VulnerabilityCVSS9.8CriticalExploited99.9%EPSS1article
CVE-2026-63077JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityCVSS9.8CriticalExploited94%EPSS19articles
CVE-2026-106219JetBrains TeamCity vulnerabilityCVSS6.5Medium–Not in KEV0.7%EPSS1article
CVE-2026-106218JetBrains TeamCity vulnerabilityCVSS8.8High–Not in KEV0.3%EPSS1article
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device