Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-28 08:11 UTC
  • Importiert: 2026-08-03 14:01 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: 978ae6420b113b0b44d38d0fefb72b7085ca7900a3d8682a024dbfc8ada467d6
The Hacker News

Inhalt

JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could result in arbitrary code execution.

The vulnerability, assigned CVE-2026-63077 (CVSS score: 9.8), affects all TeamCity On-Premises versions. It has been addressed in versions 2025.11.7 and 2026.1.3. TeamCity Cloud instances have already

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-63077

CRITICAL

9.8

CRITICAL

9.8

2026-07-27

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste