01 Record

CVE-2026-63077

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

CriticalKEVPUBLISHEDCNA: JetBrains

Base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

02 Description

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

Published

2026-07-27 16:44Z18 DAYS AGO

Last updated

2026-08-06 03:55Z8 DAYS AGO

Reserved

2026-07-15

Assigning CNA

JetBrains

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

SSVC decision

ExploitationactiveAutomatableyesTechnical Impacttotal

KEV catalog

Added 2026-08-05 · remediation due 2026-08-08

Data version

5.2

Document digest

53f5dcfb8d83088b6fcad223df6724dc10498318b82c31a3b5c81bfeb2090778

VendorProductVersionsPlatforms

JetBrainsTeamCity0 to < 2026.1.3, 2025.11.7—