JetBrains TeamCity

7 known vulnerabilities in JetBrains TeamCity, 4 critical, 4 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2026-63077 CVSS 9.8 critical · actively exploited JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
  • CVE-2024-27199 CVSS 7.3 high · actively exploited JetBrains TeamCity Relative Path Traversal Vulnerability
  • CVE-2024-27198 CVSS 9.8 critical · actively exploited JetBrains TeamCity Authentication Bypass Vulnerability
  • CVE-2023-42793 CVSS 9.8 critical · actively exploited JetBrains TeamCity Authentication Bypass Vulnerability

Latest vulnerabilities

  • CVE-2026-100255 CVSS 9.8 critical In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset
  • CVE-2026-100254 CVSS 8.8 high In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection…
  • CVE-2026-100253 CVSS 8.8 high In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings…
  • CVE-2026-63077 CVSS 9.8 critical · actively exploited JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
  • CVE-2024-27199 CVSS 7.3 high · actively exploited JetBrains TeamCity Relative Path Traversal Vulnerability
  • CVE-2024-27198 CVSS 9.8 critical · actively exploited JetBrains TeamCity Authentication Bypass Vulnerability
  • CVE-2023-42793 CVSS 9.8 critical · actively exploited JetBrains TeamCity Authentication Bypass Vulnerability