As cited
Copy frozen at (site build).
vulnerabilities
Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In
JetBrains disclosed a critical vulnerability in TeamCity on-premises (CVE-2026-63077, CVSS 9.8) that permits unauthenticated arbitrary code execution. The flaw has been patched in versions 2025.11.7 and 2026.1.3, while TeamCity Cloud instances are unaffected.
Why it matters: Organizations running on-premises TeamCity installations face immediate risk of complete system compromise without authentication; patching to the specified versions is required today.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In
JetBrains disclosed a critical vulnerability in TeamCity on-premises (CVE-2026-63077, CVSS 9.8) that permits unauthenticated arbitrary code execution. The flaw has been patched in versions 2025.11.7 and 2026.1.3, while TeamCity Cloud instances are unaffected.
Why it matters: Organizations running on-premises TeamCity installations face immediate risk of complete system compromise without authentication; patching to the specified versions is required today.
- Source published
- First seen by Cybersecurity Tracker