CVE-2026-63077

LLM-synthesized narrative grounded in this CVE's description and references.

• Jetbrains/Teamcity2 versions

  cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*range: <2025.11.7
  • (no CPE)range: <2026.1.3, 2025.11.7

• www.jetbrains.com/privacy-security/issues-fixed/nvdVendor Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• Metasploit Wrap Up: This One Goes to Sixteen!
  Rapid7 Blog · Sep 11, 2026
• Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
  The Hacker News · Sep 5, 2026
• Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)
  Rapid7 Blog · Aug 7, 2026
• CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild
  The Hacker News · Aug 6, 2026
• CISA Warns of TeamCity RCE Vulnerability Actively Exploited in Attacks
  Cyber Security News · Aug 6, 2026
• Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability
  SecurityWeek · Aug 6, 2026
• Jetbrains CVE-2026-63077 Zero-Day Added to CISA KEV Under Active Exploitation
  Vypr Intelligence · Aug 5, 2026
• ⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks
  The Hacker News · Aug 3, 2026
• 3rd August – Threat Intelligence Report
  Check Point Research · Aug 3, 2026
• Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released
  Help Net Security · Aug 2, 2026
• Critical JetBrains Flaw Allows Attackers to Execute Malicious Code Remotely – Update Now
  Cyber Security News · Jul 31, 2026
• Critical Code Execution Vulnerability Patched in TeamCity
  SecurityWeek · Jul 31, 2026
• JetBrains warns of critical TeamCity remote code execution flaw
  BleepingComputer · Jul 30, 2026
• CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity
  Rapid7 Blog · Jul 29, 2026
• JetBrains Urging Customers to Patch Critical TeamCity Flaw that Enables OS Command Execution
  Cyber Security News · Jul 28, 2026
• JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)
  Help Net Security · Jul 28, 2026
• Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In
  The Hacker News · Jul 28, 2026
• CISA Adds One Known Exploited Vulnerability to Catalog
  CISA Alerts