JetBrains TeamCity > 2023.11.3 - Authentication Bypass

In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible id: CVE-2024-23917 info: name: JetBrains TeamCity 2023.11.3 - Authentication Bypass author: iamnoooob,rootxharsh,pdresearch severity: critical description: | In JetBrains TeamCity before 2023.11.3...

JetBrains PyCharm < 2026.1.4 / 2026.2 Arbitrary Code Execution

According to its self-reported version, the JetBrains PyCharm installation on the remote host is prior to 2026.1.4. It is, therefore, affected by an arbitrary code execution vulnerability. In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was...

JetBrains TeamCity < 2025.11.7 / 2026.1.x < 2026.1.3 RCE (CVE-2026-63077)

The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.7 or 2026.1.x prior to 2026.1.3. It is, therefore, affected by a vulnerability: - Unauthenticated remote code execution was possible via the agent polling protocol. CVE-2026-63077 Note that Nessus has not tested fo...

CVE-2026-63077

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol...

CVE-2026-63077

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol...

CVE-2026-63077

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol...

CVE-2026-63077

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol...

PT-2026-65062

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1.3 JetBrains TeamCity versions prior to 2025.11.7 Description An issue exists where unauthenticated remote code execution is possible. This allows attackers to execute operating system commands withou...

CVE-2026-65907

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...

CVE-2026-65908

In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open...

CVE-2026-65907

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...

EUVD-2026-48253

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...

CVE-2026-65907

The vulnerability affects JetBrains TeamCity prior to 2026.1.2, where code execution was possible in Git VCS roots (2025.11.6). The issue is tied to TeamCity’s Git VCS integration, with impact described as CRITICAL (CVSS 3.1). Remediation: upgrade to TeamCity 2026.1.2 or later as indicated by the...

CVE-2026-65908

In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open...

EUVD-2026-48252

In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open...

CVE-2026-65908

JetBrains PyCharm is affected by CVE-2026-65908. In PyCharm before 2026.1.4 (and 2026.2), an attacker could achieve arbitrary code execution by opening a malicious Python executable in an untrusted project. Root cause is likely processing of Python executables on project open; CVSSv3.1 indicates ...

EUVD-2026-48251

In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible...

CVE-2026-64814

In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session...

CVE-2026-64815

In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files...

CVE-2026-64808

In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling...