Jetbrains: >> Teamcity >> 2019.1 Security Vulnerabilities
CVE-2026-63077
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
Known exploited
CVSS Score
9.8
EPSS Score
0.01
Published
2026-07-27
In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration
CVSS Score
8.8
EPSS Score
0.004
Published
2026-07-10
In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data
CVSS Score
7.3
EPSS Score
0.002
Published
2026-07-10
In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible
CVSS Score
8.1
EPSS Score
0.003
Published
2026-07-10
In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks
CVSS Score
8.1
EPSS Score
0.003
Published
2026-07-10
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
CVSS Score
3.4
EPSS Score
0.002
Published
2026-05-29
In JetBrains TeamCity before 2026.1,
2025.11.5 unauthenticated SSRF via build status was possible
CVSS Score
7.5
EPSS Score
0.003
Published
2026-05-29
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings
CVSS Score
7.1
EPSS Score
0.13
Published
2026-05-29
In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters
CVSS Score
7.6
EPSS Score
0.002
Published
2026-05-29
In JetBrains TeamCity before 2026.1,
2025.11.5 reflected XSS was possible on the repository download page
CVSS Score
6.1
EPSS Score
0.002
Published
2026-05-29
Page 1