{"id":"CVE-2026-63077","title":"In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol","summary":"In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-502"],"vendor":"JetBrains","product":"TeamCity","affected":["TeamCity < 2026.1.3, 2025.11.7"],"ssvc":{"exploitation":"active","automatable":"yes","technicalImpact":"total","timestamp":"2026-07-27T00:00:00+00:00"},"exploited":true,"exploitAvailable":true,"published":"2026-07-27","updated":"2026-09-23","sourceUpdated":"2026-09-23T03:55:33.804Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-63077","references":[{"url":"https://www.jetbrains.com/privacy-security/issues-fixed/"}],"tags":["cve.org","in-the-wild","exploit-available","kev"],"epss":0.93558,"epssPercentile":0.9984,"kev":true,"kevDateAdded":"2026-08-05","kevDueDate":"2026-08-08","kevRansomware":true,"exploits":{"github":7,"githubRepos":["https://github.com/sfewer-r7/CVE-2026-63077","https://github.com/0xCyp1337/CVE-2026-63077","https://github.com/unveiledhistory49/teamcity-cve-2026-63077-remediation"],"metasploit":["exploit/multi/http/jetbrains_teamcity_rce_cve_2026_63077"],"nuclei":["CVE-2026-63077"],"checkedAt":"2026-10-27T19:06:41.714Z"},"ingestedAt":"2026-09-23T04:16:39.144Z","slug":"CVE-2026-63077","body":"## Overview\n\nIn JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol\n\n## Affected\n\n- `TeamCity < 2026.1.3, 2025.11.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"hadal","depthScore":100,"depthScoreParts":{"impact":53.9,"likelihood":18.7,"exploitation":25,"ransomware":5},"changes":[{"seq":212718,"id":"CVE-2026-63077","ts":1790694411888,"field":"epss","old":"0.09763","new":"0.8957"},{"seq":210784,"id":"CVE-2026-63077","ts":1790326076409,"field":"epss","old":"0.86518","new":"0.09763"}]}