JetBrains TeamCity > 2023.11.3 - Authentication Bypass

In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible id: CVE-2024-23917 info: name: JetBrains TeamCity 2023.11.3 - Authentication Bypass author: iamnoooob,rootxharsh,pdresearch severity: critical description: | In JetBrains TeamCity before 2023.11.3...

JetBrains TeamCity < 2025.11.7 / 2026.1.x < 2026.1.3 RCE (CVE-2026-63077)

The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.7 or 2026.1.x prior to 2026.1.3. It is, therefore, affected by a vulnerability: - Unauthenticated remote code execution was possible via the agent polling protocol. CVE-2026-63077 Note that Nessus has not tested fo...

Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could result in arbitrary code execution. The vulnerability, assigned CVE-2026-63077 CVSS score: 9.8, affects all TeamCity On-Premises version...

CVE-2026-63077

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol...

CVE-2026-63077

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol...

EUVD-2026-49369

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol...

CVE-2026-63077

CVE-2026-63077 concerns JetBrains TeamCity, with unauthenticated remote code execution reported in versions prior to 2026.1.3 (and 2025.11.7) via the agent polling protocol. The NVD entry describes this as a critical issue (CVSS 3.1 base score 9.8) with network attack vector, no privileges requir...

CVE-2026-63077

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol...

CVE-2026-63077

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol...

PT-2026-65062

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1.3 JetBrains TeamCity versions prior to 2025.11.7 Description An issue exists where unauthenticated remote code execution is possible. This allows attackers to execute operating system commands withou...

CVE-2026-65906

In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible...

CVE-2026-65907

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...

CVE-2026-65907

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...

EUVD-2026-48253

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...

CVE-2026-65907

The vulnerability affects JetBrains TeamCity prior to 2026.1.2, where code execution was possible in Git VCS roots (2025.11.6). The issue is tied to TeamCity’s Git VCS integration, with impact described as CRITICAL (CVSS 3.1). Remediation: upgrade to TeamCity 2026.1.2 or later as indicated by the...

CVE-2026-65906

In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible...

CVE-2026-65906

CVE-2026-65906 affects JetBrains TeamCity prior to 2026.1.2. The issue is a code execution vulnerability exposed via Kotlin DSL sandbox escape, allowing an attacker to execute arbitrary code under certain conditions. The CVSS 3.1 base metrics indicate HIGH impact across confidentiality, integrity...

EUVD-2026-48251

In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible...

PT-2026-63981

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1.2 JetBrains TeamCity versions prior to 2025.11.6 Description Remote code execution is possible within Git VCS roots. VCS Version Control System roots are configurations that define the source code...

PT-2026-63980

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1.2 JetBrains TeamCity versions prior to 2025.11.6 Description Remote code execution is possible through a sandbox escape within the Kotlin DSL Domain Specific Language, which is a concise notation for...