AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-63077

JetBrains TeamCity: remote code execution

JetBrains

CVE-2026-63077 · Published Jul 27, 2026 · updated Aug 6, 2026

Critical9.8
Fix: upgrade to 2026.1.3 or later (2 fixed versions below)
JetBrains advisory

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

Affected versions

PackageAffectedFixed in
TeamCity
Product
< 2026.1.3, 2025.11.72026.1.3, 2025.11.7
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-502

More JetBrains advisories

All JetBrains
High 8.8Jul 23JetBrains TeamCity: code injectionCVE-2026-65906fixed in 2026.1.2 +1Critical 9.1Jul 23JetBrains TeamCity: code executionCVE-2026-65907fixed in 2026.1.2 +1High 8.6Jul 23JetBrains PyCharm: code executionCVE-2026-65908fixed in 2026.1.4 +1High 8.6Jul 23JetBrains IntelliJ IDEA: missing authorizationCVE-2026-64814fixed in 2026.2High 8.1Jul 23JetBrains IntelliJ IDEA: code injectionCVE-2026-64815fixed in 2026.2High 8.4Jul 23JetBrains WebStorm: code executionCVE-2026-64806fixed in 2026.2