Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [QUIET] · [TECHNOLOGY]
2 clusters · 5 sources · 27 days · First seen · Last updated
JetBrains TeamCity remote code execution vulnerability
Overview
On July 27, 2026, JetBrains disclosed a critical unauthenticated remote code execution vulnerability, identified as CVE-2026-63077, affecting all versions of TeamCity On-Premises. The flaw, which carries a CVSS score of 9.8, involves a deserialization issue in the agent polling protocol. If exploited, an attacker with HTTP(S) access could bypass authentication to execute arbitrary operating-system commands, potentially compromising CI/CD pipelines and reading stored credentials. At the time of disclosure, JetBrains reported no evidence of active exploitation.
By late August, the Australian Cyber Security Centre (ACSC) issued a high-severity alert indicating that the vulnerability was being actively exploited within Australia. The ACSC warned that the flaw poses significant risks to the integrity of build artifacts and the exposure of sensitive configurations. The agency advised organizations to apply patches immediately and monitor for suspicious activity.
Entities
TeamCity · JetBrains · Australian Cyber Security Centre · Antoni Tremblay · Australian Signals Directorate
Timeline
-
18 days ago
[TECHNOLOGY] 5 sourcesAustralian Cyber Security Centre warns of active TeamCity server exploitationThe ACSC has warned of active exploitation of a critical 9.8-rated vulnerability (CVE-2026-63077) in JetBrains' TeamCity On-Premises servers affecting organisations in Australia.
-
about 1 month ago
[TECHNOLOGY] 2 sourcesJetBrains releases patches for critical TeamCity On-Premises remote code execution flawJetBrains disclosed CVE-2026-63077, a critical unauthenticated RCE bug in TeamCity On-Premises, and urged users to upgrade to 2025.11.7/2026.1.3 or apply a patch; cloud instances are unaffected.
Sources
australiancybersecuritymagazine.com.au · cybernoz.com · cybersecurity-news.de · govtechreview.com.au · itnews.com.au