CVE-2026-63077: In JetBrains TeamCity before 2026.1.3, 2025.11.7

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

• CVSS 9.8 critical

Related briefings

• Critical JetBrains TeamCity bug lets attackers hijack build servers 2026-07-29

Browse the CVE database

Read the full analysis on IntelFusions