{"schema_version":1,"title":"Jetbrains TeamCity vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 22 vulnerabilities in Jetbrains TeamCity: 0 in the last 7 days and 7 in the last 90 days, 5 of them critical and 4 exploited in the wild. The most recent, CVE-2026-63077, was published on 27 July 2026.","url":"https://junglewise.ai/threats/technologies/teamcity","json_url":"https://junglewise.ai/threats/technologies/teamcity.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/teamcity","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":10,"all_time":22,"critical":5,"exploited":4,"last_7_days":0,"last_30_days":0,"last_90_days":7,"last_365_days":20},"latest":[{"cve":"CVE-2026-63077","cvss":9.8,"epss":0.0065,"slug":"cve-2026-63077-jetbrains-teamcity-remote-code-execution-in-agent-polling","title":"JetBrains TeamCity remote code execution in agent polling protocol","severity":"critical","exploited":true,"published_at":"2026-07-27T17:16:38.83+00:00","url":"https://junglewise.ai/threats/cve-2026-63077-jetbrains-teamcity-remote-code-execution-in-agent-polling"},{"cve":"CVE-2026-65907","cvss":9.1,"slug":"cve-2026-65907-jetbrains-teamcity-code-execution-in-git-vcs-roots","title":"JetBrains TeamCity code execution in Git VCS roots","severity":"critical","exploited":false,"published_at":"2026-07-23T13:16:31.86+00:00","url":"https://junglewise.ai/threats/cve-2026-65907-jetbrains-teamcity-code-execution-in-git-vcs-roots"},{"cve":"CVE-2026-65906","cvss":8.8,"slug":"cve-2026-65906-jetbrains-teamcity-remote-code-execution-via-kotlin-dsl-sandbox","title":"JetBrains TeamCity remote code execution via Kotlin DSL sandbox escape","severity":"high","exploited":false,"published_at":"2026-07-23T13:16:31.733+00:00","url":"https://junglewise.ai/threats/cve-2026-65906-jetbrains-teamcity-remote-code-execution-via-kotlin-dsl-sandbox"},{"cve":"CVE-2026-59796","cvss":8.1,"slug":"cve-2026-59796-jetbrains-teamcity-improper-permission-checks-in-pipeline","title":"JetBrains TeamCity improper permission checks in pipeline modification","severity":"high","exploited":false,"published_at":"2026-07-10T15:16:48.683+00:00","url":"https://junglewise.ai/threats/cve-2026-59796-jetbrains-teamcity-improper-permission-checks-in-pipeline"},{"cve":"CVE-2026-59795","cvss":8.1,"slug":"cve-2026-59795-jetbrains-teamcity-stored-xss-in-agent-registration","title":"JetBrains TeamCity stored XSS in agent registration","severity":"high","exploited":false,"published_at":"2026-07-10T15:16:48.573+00:00","url":"https://junglewise.ai/threats/cve-2026-59795-jetbrains-teamcity-stored-xss-in-agent-registration"},{"cve":"CVE-2026-59794","cvss":7.3,"slug":"cve-2026-59794-jetbrains-teamcity-stored-xss-in-cloud-profile-page","title":"JetBrains TeamCity stored XSS in cloud profile page","severity":"high","exploited":false,"published_at":"2026-07-10T15:16:48.463+00:00","url":"https://junglewise.ai/threats/cve-2026-59794-jetbrains-teamcity-stored-xss-in-cloud-profile-page"},{"cve":"CVE-2026-59793","cvss":8.8,"slug":"cve-2026-59793-jetbrains-teamcity-arbitrary-file-access-in-perforce-vcs","title":"JetBrains TeamCity arbitrary file access in Perforce VCS integration","severity":"high","exploited":false,"published_at":"2026-07-10T15:16:48.35+00:00","url":"https://junglewise.ai/threats/cve-2026-59793-jetbrains-teamcity-arbitrary-file-access-in-perforce-vcs"},{"cve":"CVE-2026-49381","cvss":3.4,"slug":"cve-2026-49381-jetbrains-teamcity-stored-xss-on-saml-login-page","title":"JetBrains TeamCity stored XSS on SAML login page","severity":"low","exploited":false,"published_at":"2026-05-29T19:16:28.11+00:00","url":"https://junglewise.ai/threats/cve-2026-49381-jetbrains-teamcity-stored-xss-on-saml-login-page"},{"cve":"CVE-2026-49380","cvss":3.1,"slug":"cve-2026-49380-jetbrains-teamcity-open-redirect-in-saml-plugin","title":"JetBrains TeamCity open redirect in SAML plugin","severity":"low","exploited":false,"published_at":"2026-05-29T19:16:27.99+00:00","url":"https://junglewise.ai/threats/cve-2026-49380-jetbrains-teamcity-open-redirect-in-saml-plugin"},{"cve":"CVE-2026-49379","cvss":6.5,"slug":"cve-2026-49379-jetbrains-teamcity-credential-exposure-in-thread-names","title":"JetBrains TeamCity credential exposure in thread names","severity":"medium","exploited":false,"published_at":"2026-05-29T19:16:27.88+00:00","url":"https://junglewise.ai/threats/cve-2026-49379-jetbrains-teamcity-credential-exposure-in-thread-names"},{"cve":"CVE-2026-49378","cvss":4.3,"slug":"cve-2026-49378-jetbrains-teamcity-credential-exposure-via-parameter","title":"JetBrains TeamCity credential exposure via parameter autocompletion","severity":"medium","exploited":false,"published_at":"2026-05-29T19:16:27.76+00:00","url":"https://junglewise.ai/threats/cve-2026-49378-jetbrains-teamcity-credential-exposure-via-parameter"},{"cve":"CVE-2026-49377","cvss":4.3,"slug":"cve-2026-49377-jetbrains-teamcity-sensitive-data-exposure-in-default-agent","title":"JetBrains TeamCity sensitive data exposure in default agent parameters","severity":"medium","exploited":false,"published_at":"2026-05-29T19:16:27.65+00:00","url":"https://junglewise.ai/threats/cve-2026-49377-jetbrains-teamcity-sensitive-data-exposure-in-default-agent"},{"cve":"CVE-2026-49376","cvss":6.5,"slug":"cve-2026-49376-jetbrains-teamcity-insufficient-username-validation-in-saml","title":"JetBrains TeamCity insufficient username validation in SAML plugin","severity":"medium","exploited":false,"published_at":"2026-05-29T19:16:27.537+00:00","url":"https://junglewise.ai/threats/cve-2026-49376-jetbrains-teamcity-insufficient-username-validation-in-saml"},{"cve":"CVE-2026-49375","cvss":6.1,"slug":"cve-2026-49375-jetbrains-teamcity-reflected-xss-in-repository-download-page","title":"JetBrains TeamCity reflected XSS in repository download page","severity":"medium","exploited":false,"published_at":"2026-05-29T19:16:27.423+00:00","url":"https://junglewise.ai/threats/cve-2026-49375-jetbrains-teamcity-reflected-xss-in-repository-download-page"},{"cve":"CVE-2026-49374","cvss":7.6,"slug":"cve-2026-49374-jetbrains-teamcity-improper-permission-checks-in-build","title":"JetBrains TeamCity improper permission checks in build configuration","severity":"high","exploited":false,"published_at":"2026-05-29T19:16:27.31+00:00","url":"https://junglewise.ai/threats/cve-2026-49374-jetbrains-teamcity-improper-permission-checks-in-build"},{"cve":"CVE-2026-49373","cvss":7.1,"slug":"cve-2026-49373-jetbrains-teamcity-remote-code-execution-in-perforce-connection","title":"JetBrains TeamCity remote code execution in Perforce connection settings","severity":"high","exploited":false,"published_at":"2026-05-29T19:16:27.163+00:00","url":"https://junglewise.ai/threats/cve-2026-49373-jetbrains-teamcity-remote-code-execution-in-perforce-connection"},{"cve":"CVE-2026-49372","cvss":7.5,"slug":"cve-2026-49372-jetbrains-teamcity-unauthenticated-ssrf-in-build-status","title":"JetBrains TeamCity unauthenticated SSRF in build status","severity":"high","exploited":false,"published_at":"2026-05-29T19:16:27.03+00:00","url":"https://junglewise.ai/threats/cve-2026-49372-jetbrains-teamcity-unauthenticated-ssrf-in-build-status"},{"cve":"CVE-2026-49371","cvss":7.1,"slug":"cve-2026-49371-jetbrains-teamcity-reflected-xss-in-keyword-filter","title":"JetBrains TeamCity reflected XSS in keyword filter","severity":"high","exploited":false,"published_at":"2026-05-29T19:16:26.913+00:00","url":"https://junglewise.ai/threats/cve-2026-49371-jetbrains-teamcity-reflected-xss-in-keyword-filter"},{"cve":"CVE-2026-44413","cvss":8.2,"slug":"cve-2026-44413-jetbrains-teamcity-authentication-bypass-in-server-api","title":"JetBrains TeamCity authentication bypass in server API","severity":"high","exploited":false,"published_at":"2026-05-11T18:16:38.053+00:00","url":"https://junglewise.ai/threats/cve-2026-44413-jetbrains-teamcity-authentication-bypass-in-server-api"},{"cve":"CVE-2024-27199","cvss":7.3,"epss":0.9093,"slug":"cve-2024-27199-jetbrains-teamcity-relative-path-traversal-in-admin-interface","title":"JetBrains TeamCity relative path traversal in admin interface","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-27199-jetbrains-teamcity-relative-path-traversal-in-admin-interface"},{"cve":"CVE-2024-27198","cvss":9.8,"slug":"cve-2024-27198-jetbrains-teamcity-authentication-bypass-vulnerability","title":"JetBrains TeamCity Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-27198-jetbrains-teamcity-authentication-bypass-vulnerability"},{"cve":"CVE-2023-42793","cvss":9.8,"slug":"cve-2023-42793-jetbrains-teamcity-authentication-bypass-vulnerability","title":"JetBrains TeamCity Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-42793-jetbrains-teamcity-authentication-bypass-vulnerability"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":1,"exploited":0,"vulnerabilities":2},{"week":"2026-07-27","critical":1,"exploited":1,"vulnerabilities":1},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Jetbrains YouTrack","slug":"youtrack","vulnerabilities":43,"url":"https://junglewise.ai/threats/technologies/youtrack"},{"name":"Jetbrains IntelliJ IDEA","slug":"intellij-idea","vulnerabilities":23,"url":"https://junglewise.ai/threats/technologies/intellij-idea"},{"name":"Jetbrains GoLand","slug":"goland","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/goland"},{"name":"Jetbrains Hub","slug":"hub","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/hub"},{"name":"Jetbrains PyCharm","slug":"pycharm","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/pycharm"},{"name":"Jetbrains Webstorm","slug":"webstorm","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/webstorm"}],"technology":{"hub":true,"name":"Jetbrains TeamCity","slug":"teamcity","vendor":{"name":"Jetbrains","slug":"jetbrains","url":"https://junglewise.ai/threats/vendors/jetbrains"},"aliases":[],"category":"ci-cd","homepage":"https://www.jetbrains.com/teamcity/","repo_url":"https://github.com/JetBrains/teamcity-csharp-interactive","description":"A continuous integration and continuous delivery server for automating software build, test, and deployment processes.","url":"https://junglewise.ai/threats/technologies/teamcity"},"most_severe":[{"cve":"CVE-2026-63077","cvss":9.8,"epss":0.0065,"slug":"cve-2026-63077-jetbrains-teamcity-remote-code-execution-in-agent-polling","title":"JetBrains TeamCity remote code execution in agent polling protocol","severity":"critical","exploited":true,"published_at":"2026-07-27T17:16:38.83+00:00","url":"https://junglewise.ai/threats/cve-2026-63077-jetbrains-teamcity-remote-code-execution-in-agent-polling"},{"cve":"CVE-2024-27198","cvss":9.8,"slug":"cve-2024-27198-jetbrains-teamcity-authentication-bypass-vulnerability","title":"JetBrains TeamCity Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2024-03-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-27198-jetbrains-teamcity-authentication-bypass-vulnerability"},{"cve":"CVE-2023-42793","cvss":9.8,"slug":"cve-2023-42793-jetbrains-teamcity-authentication-bypass-vulnerability","title":"JetBrains TeamCity Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-04T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-42793-jetbrains-teamcity-authentication-bypass-vulnerability"},{"cve":"CVE-2024-27199","cvss":7.3,"epss":0.9093,"slug":"cve-2024-27199-jetbrains-teamcity-relative-path-traversal-in-admin-interface","title":"JetBrains TeamCity relative path traversal in admin interface","severity":"critical","exploited":true,"published_at":"2026-04-20T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-27199-jetbrains-teamcity-relative-path-traversal-in-admin-interface"},{"cve":"CVE-2026-65907","cvss":9.1,"slug":"cve-2026-65907-jetbrains-teamcity-code-execution-in-git-vcs-roots","title":"JetBrains TeamCity code execution in Git VCS roots","severity":"critical","exploited":false,"published_at":"2026-07-23T13:16:31.86+00:00","url":"https://junglewise.ai/threats/cve-2026-65907-jetbrains-teamcity-code-execution-in-git-vcs-roots"},{"cve":"CVE-2026-65906","cvss":8.8,"slug":"cve-2026-65906-jetbrains-teamcity-remote-code-execution-via-kotlin-dsl-sandbox","title":"JetBrains TeamCity remote code execution via Kotlin DSL sandbox escape","severity":"high","exploited":false,"published_at":"2026-07-23T13:16:31.733+00:00","url":"https://junglewise.ai/threats/cve-2026-65906-jetbrains-teamcity-remote-code-execution-via-kotlin-dsl-sandbox"},{"cve":"CVE-2026-59793","cvss":8.8,"slug":"cve-2026-59793-jetbrains-teamcity-arbitrary-file-access-in-perforce-vcs","title":"JetBrains TeamCity arbitrary file access in Perforce VCS integration","severity":"high","exploited":false,"published_at":"2026-07-10T15:16:48.35+00:00","url":"https://junglewise.ai/threats/cve-2026-59793-jetbrains-teamcity-arbitrary-file-access-in-perforce-vcs"},{"cve":"CVE-2026-44413","cvss":8.2,"slug":"cve-2026-44413-jetbrains-teamcity-authentication-bypass-in-server-api","title":"JetBrains TeamCity authentication bypass in server API","severity":"high","exploited":false,"published_at":"2026-05-11T18:16:38.053+00:00","url":"https://junglewise.ai/threats/cve-2026-44413-jetbrains-teamcity-authentication-bypass-in-server-api"},{"cve":"CVE-2026-59796","cvss":8.1,"slug":"cve-2026-59796-jetbrains-teamcity-improper-permission-checks-in-pipeline","title":"JetBrains TeamCity improper permission checks in pipeline modification","severity":"high","exploited":false,"published_at":"2026-07-10T15:16:48.683+00:00","url":"https://junglewise.ai/threats/cve-2026-59796-jetbrains-teamcity-improper-permission-checks-in-pipeline"},{"cve":"CVE-2026-59795","cvss":8.1,"slug":"cve-2026-59795-jetbrains-teamcity-stored-xss-in-agent-registration","title":"JetBrains TeamCity stored XSS in agent registration","severity":"high","exploited":false,"published_at":"2026-07-10T15:16:48.573+00:00","url":"https://junglewise.ai/threats/cve-2026-59795-jetbrains-teamcity-stored-xss-in-agent-registration"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}