CVE-2026-63077

CriticalCVSS 9.8

Published: 27/07/2026(UTC)Updated: 28/07/2026(UTC)Translated: 27/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.65%

47th percentile - higher than 47% of all known CVEs

In JetBrains TeamCity before versions 2026.1.3 and 2025.11.7, unauthenticated remote code execution is possible via the agent polling protocol.

An unauthenticated attacker can remotely execute arbitrary code on the TeamCity server, potentially leading to full system compromise.

Immediately update JetBrains TeamCity to version 2026.1.3 or later (or 2025.11.7 depending on the branch).

Original NVD description (English source)

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol