high Known exploited

CVE-2026-63077

JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.

Published: Jul 27, 2026
CVSS: 9.8
Vendor: JetBrains
Product: TeamCity
CISA due date: 2026-08-08
Source: merged

References

ADVISORY

Check your website: Korisec scans for exposed services, weak TLS, missing headers, and WordPress plugin risks. Run a free scan or start a trial.

← Back to CVE Tracker · Official record: cve.org