CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2026-63077: Critical TeamCity Authentication Bypass and RCE

July 28, 2026

A critical vulnerability in JetBrains TeamCity On-Premises allows unauthenticated attackers to bypass authentication and execute arbitrary OS commands via the agent polling protocol. CVSS 9.8. Patched in versions 2025.11.7 and 2026.1.3.