← All advisories

Critical severity9.8CISA KEVNVD Advisory· Published Mar 4, 2024· Updated Jun 17, 2026

CVE-2024-27198

CVE-2024-27198

Description

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Jetbrains/Teamcity3 versions
cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*range: <2023.11.4
- (no CPE)range: <2023.11.4
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

3

www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrivenvdPress/Media CoverageThird Party Advisory
www.jetbrains.com/privacy-security/issues-fixed/nvdVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

2

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw
The Hacker News · Aug 10, 2026
JetBrains TeamCity vulnerability allows privilege escalation, API exposure (CVE-2026-44413)
Help Net Security · May 12, 2026