https://vulnerability.circl.lu/sightings/feed 2026-08-29T17:01:53.062601+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ce65cc77-4fc3-4566-9a80-934681f025b9/export 2026-08-29T17:01:53.084910+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ce65cc77-4fc3-4566-9a80-934681f025b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mu57njozdu2e", "content": "Unauthorized access exposed customer data in JetBrains Cadence, which was exploited via a critical TeamCity vulnerability (CVE-2026-63077).\n", "creation_timestamp": "2026-08-28T11:03:30.237893Z"} 2026-08-28T11:03:30.237893+00:00 https://vulnerability.circl.lu/sighting/3ebafc30-9357-4be1-9514-8926b1ed4c79/export 2026-08-29T17:01:53.087033+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3ebafc30-9357-4be1-9514-8926b1ed4c79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mu57lf2m362w", "content": "Unauthorized access exposed customer data in JetBrains Cadence, which was exploited via a critical TeamCity vulnerability (CVE-2026-63077).\n", "creation_timestamp": "2026-08-28T11:02:18.139611Z"} 2026-08-28T11:02:18.139611+00:00 https://vulnerability.circl.lu/sighting/6d78d45e-e876-461a-a8d9-3494512893a0/export 2026-08-29T17:01:53.087183+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6d78d45e-e876-461a-a8d9-3494512893a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/481", "content": "CVE-2026-63077", "creation_timestamp": "2026-08-28T00:00:38.826395Z"} 2026-08-28T00:00:38.826395+00:00 https://vulnerability.circl.lu/sighting/6401c723-7d4c-4290-9419-22c3c41696bd/export 2026-08-29T17:01:53.087302+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6401c723-7d4c-4290-9419-22c3c41696bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://t.me/critical_bug/1823", "content": "\ud83d\udd34 \u041e\u0434\u0438\u043d XML-\u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 CI/CD-\u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 JetBrains TeamCity\n\nCVE-2026-63077 | CVSS 9.8 | CWE-502 | \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\n\u0412 TeamCity On-Premises \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0447\u0435\u0440\u0435\u0437 HTTP(S). \u0412\u0435\u043a\u0442\u043e\u0440 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0435 \u0432 \u043e\u0431\u044b\u0447\u043d\u043e\u043c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435, \u0430 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 \u043e\u043f\u0440\u043e\u0441\u0430 TeamCity Agents.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u2014 \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Java-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 XStream. TeamCity \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0441\u044b \u0432 allowlist \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043d\u043e \u043d\u0435 \u0443\u0434\u0430\u043b\u044f\u043b \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f XStream \u0434\u043b\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u0445 \u0438\u0435\u0440\u0430\u0440\u0445\u0438\u0439 Map, Collection \u0438 Throwable. \u042d\u0442\u043e\u0433\u043e \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0438 \u0434\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0421\u0445\u0435\u043c\u0430 \u0430\u0442\u0430\u043a\u0438:\n\n\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u0430\u0433\u0435\u043d\u0442\u0430 \u2192 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 session ID \u2192 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 XML \u2192 XStream gadget chain \u2192 HSQLDB \u2192 \u0437\u0430\u043f\u0438\u0441\u044c JSPWS \u0432 webroot \u2192 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 BasicDataSource \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e HSQLDB \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c SQL \u0438\u0437 connectionInitSqls. \u041a\u043e\u043c\u0430\u043d\u0434\u0430 SCRIPT \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 TeamCity \u0444\u0430\u0439\u043b .jspws, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f Apache Jasper \u043a\u0430\u043a \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0439 JSP. \u041a\u043e\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 TeamCity.\n\n\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f CI/CD-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438, VCS- \u0438 cloud-\u0442\u043e\u043a\u0435\u043d\u044b, \u043a\u043b\u044e\u0447\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 TeamCity On-Premises. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432:\n\n- TeamCity 2025.11.7;\n- TeamCity 2026.1.3.\n\n\u0414\u043b\u044f TeamCity 2017.1+ \u0432\u044b\u043f\u0443\u0449\u0435\u043d security patch plugin, \u043d\u043e \u043e\u043d \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e CVE-2026-63077. TeamCity Cloud \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0451\u043d.\n\n\u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438:\n\n- com.thoughtworks.xstream.converters.ConversionException;\n- HSQLMetadataStorage$SchemaMismatchException;\n- \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /app/agents/v1/commands/error;\n- \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0430\u0433\u0435\u043d\u0442\u044b \u0441 \u0438\u043c\u0435\u043d\u0430\u043c\u0438, \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0438\u043c\u0438\u0441\u044f \u043d\u0430 scan;\n- \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 .jspws \u0432 webroot.\n\n\u041f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f ForbiddenClassException \u043c\u043e\u0436\u0435\u0442 \u043e\u0437\u043d\u0430\u0447\u0430\u0442\u044c, \u0447\u0442\u043e exploit \u0431\u044b\u043b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439.\n\nCVE \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 CISA KEV. \u041f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e: \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e, \u0430 \u043f\u0440\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u043a \u0438 \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u0445\u0440\u0430\u043d\u0438\u0432\u0448\u0438\u0435\u0441\u044f \u0432 TeamCity \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\n\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0440\u0442: https://eh.su/reports/unauth-rce-v-jetbrains-teamcity-oshibochnyy-xstream-allowlist-otkryvaet-put-k-zahvatu-ci-cd\n\n#TeamCity #JetBrains #CVE202663077 #RCE #CICD #DevSecOps #CyberSecurity", "creation_timestamp": "2026-08-28T00:00:30.877397Z"} 2026-08-28T00:00:30.877397+00:00 https://vulnerability.circl.lu/sighting/d0e72263-ef5f-48bb-b88f-9aa2717d0041/export 2026-08-29T17:01:53.087465+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d0e72263-ef5f-48bb-b88f-9aa2717d0041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://t.me/critical_bug/1823", "content": "\ud83d\udd34 \u041e\u0434\u0438\u043d XML-\u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 CI/CD-\u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 JetBrains TeamCity\n\nCVE-2026-63077 | CVSS 9.8 | CWE-502 | \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\n\u0412 TeamCity On-Premises \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0447\u0435\u0440\u0435\u0437 HTTP(S). \u0412\u0435\u043a\u0442\u043e\u0440 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0435 \u0432 \u043e\u0431\u044b\u0447\u043d\u043e\u043c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435, \u0430 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 \u043e\u043f\u0440\u043e\u0441\u0430 TeamCity Agents.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u2014 \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Java-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 XStream. TeamCity \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0441\u044b \u0432 allowlist \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043d\u043e \u043d\u0435 \u0443\u0434\u0430\u043b\u044f\u043b \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f XStream \u0434\u043b\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u0445 \u0438\u0435\u0440\u0430\u0440\u0445\u0438\u0439 Map, Collection \u0438 Throwable. \u042d\u0442\u043e\u0433\u043e \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0438 \u0434\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0421\u0445\u0435\u043c\u0430 \u0430\u0442\u0430\u043a\u0438:\n\n\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u0430\u0433\u0435\u043d\u0442\u0430 \u2192 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 session ID \u2192 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 XML \u2192 XStream gadget chain \u2192 HSQLDB \u2192 \u0437\u0430\u043f\u0438\u0441\u044c JSPWS \u0432 webroot \u2192 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 BasicDataSource \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e HSQLDB \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c SQL \u0438\u0437 connectionInitSqls. \u041a\u043e\u043c\u0430\u043d\u0434\u0430 SCRIPT \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 TeamCity \u0444\u0430\u0439\u043b .jspws, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f Apache Jasper \u043a\u0430\u043a \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0439 JSP. \u041a\u043e\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 TeamCity.\n\n\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f CI/CD-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438, VCS- \u0438 cloud-\u0442\u043e\u043a\u0435\u043d\u044b, \u043a\u043b\u044e\u0447\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 TeamCity On-Premises. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432:\n\n- TeamCity 2025.11.7;\n- TeamCity 2026.1.3.\n\n\u0414\u043b\u044f TeamCity 2017.1+ \u0432\u044b\u043f\u0443\u0449\u0435\u043d security patch plugin, \u043d\u043e \u043e\u043d \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e CVE-2026-63077. TeamCity Cloud \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0451\u043d.\n\n\u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438:\n\n- com.thoughtworks.xstream.converters.ConversionException;\n- HSQLMetadataStorage$SchemaMismatchException;\n- \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /app/agents/v1/commands/error;\n- \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0430\u0433\u0435\u043d\u0442\u044b \u0441 \u0438\u043c\u0435\u043d\u0430\u043c\u0438, \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0438\u043c\u0438\u0441\u044f \u043d\u0430 scan;\n- \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 .jspws \u0432 webroot.\n\n\u041f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f ForbiddenClassException \u043c\u043e\u0436\u0435\u0442 \u043e\u0437\u043d\u0430\u0447\u0430\u0442\u044c, \u0447\u0442\u043e exploit \u0431\u044b\u043b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439.\n\nCVE \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 CISA KEV. \u041f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e: \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e, \u0430 \u043f\u0440\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u043a \u0438 \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u0445\u0440\u0430\u043d\u0438\u0432\u0448\u0438\u0435\u0441\u044f \u0432 TeamCity \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\n\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0440\u0442: https://eh.su/reports/unauth-rce-v-jetbrains-teamcity-oshibochnyy-xstream-allowlist-otkryvaet-put-k-zahvatu-ci-cd\n\n#TeamCity #JetBrains #CVE202663077 #RCE #CICD #DevSecOps #CyberSecurity", "creation_timestamp": "2026-08-27T20:00:11.572243Z"} 2026-08-27T20:00:11.572243+00:00 https://vulnerability.circl.lu/sighting/9aad5f7a-23d3-4f6f-a4df-733cb59af278/export 2026-08-29T17:01:53.087614+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9aad5f7a-23d3-4f6f-a4df-733cb59af278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/481", "content": "CVE-2026-63077", "creation_timestamp": "2026-08-27T15:00:05.138020Z"} 2026-08-27T15:00:05.138020+00:00 https://vulnerability.circl.lu/sighting/6df04b13-578e-46e1-993f-c237cc20e049/export 2026-08-29T17:01:53.087718+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6df04b13-578e-46e1-993f-c237cc20e049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mu2iv6iues24", "content": "JetBrains\u306f\u3001\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u8a8d\u8a3c\u306a\u3057\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u3066\u3057\u307e\u3046\u3001TeamCity\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-63077\uff09\u3092\u4fee\u6b63\u3057\u307e\u3057\u305f\u3002\n\nJetBrains\u306f\u3001\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-63077\u3001CVSS\u30b9\u30b3\u30a29.8\uff09\u3092\u767a\u898b\u3057\u305f\u3053\u3068\u3092\u53d7\u3051\u3001TeamCity\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u4efb\u610f\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\u306f\u3059\u3079\u3066\u5f71\u97ff\u3092\u53d7\u3051\u307e\u3059\u304c\u3001TeamCity\u30af\u30e9\u30a6\u30c9\u7248\u306f\u65e2\u306b\u30d1\u30c3\u30c1\u304c\u9069\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u30e6\u30fc\u30b6\u30fc\u306f\u30d0\u30fc\u30b8\u30e7\u30f320...", "creation_timestamp": "2026-08-27T09:10:52.655365Z"} 2026-08-27T09:10:52.655365+00:00 https://vulnerability.circl.lu/sighting/22c77535-045d-45fc-af86-c45ca8d48aa3/export 2026-08-29T17:01:53.087827+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "22c77535-045d-45fc-af86-c45ca8d48aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mu2iibtlzc24", "content": "TeamCity\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u767a\u898b\u3055\u308c\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u30b7\u30b9\u30c6\u30e0\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u3053\u3068\u304c\u5224\u660e\u3002\n\nJetBrains\u306f\u3001 TeamCity On-Premises\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-63077\uff09\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u3092\u767a\u8868\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u3001\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u4efb\u610f\u306e\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0\u30b7\u30b9\u30c6\u30e0\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\n\u3053\u306e\u554f\u984c\u306f\u3001\u30bb\u30eb\u30d5\u30db\u30b9\u30c8\u578b\u306e\u7d99\u7d9a\u7684\u30a4\u30f3\u30c6\u30b0\u30ec\u30fc\u30b7\u30e7\u30f3\u304a\u3088\u3073\u7d99\u7d9a\u7684\u30c7\u30ea\u30d0\u30ea\u30fc\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306e\u3059\u3079\u3066\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u305f\u3081\u3001HTTP\u307e\u305f\u306fHTTPS\u7d4c\u7531\u3067TeamCity\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u3092\u516c\u958b\u3057...", "creation_timestamp": "2026-08-27T09:03:41.243262Z"} 2026-08-27T09:03:41.243262+00:00 https://vulnerability.circl.lu/sighting/1cdfc188-bf62-4833-a1f5-b2334256b0d1/export 2026-08-29T17:01:53.087942+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1cdfc188-bf62-4833-a1f5-b2334256b0d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtzkfxukms2j", "content": "TeamCity\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u30ed\u30b0\u30a4\u30f3\u305b\u305a\u306bOS\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\n\nJetBrains\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u554f\u984c\u304c\u767a\u898b\u3055\u308c\u305f\u3053\u3068\u3092\u53d7\u3051\u3001\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248TeamCity\u306e\u9867\u5ba2\u306b\u5bfe\u3057\u3001\u6700\u65b0\u30d0\u30fc\u30b8\u30e7\u30f3\u3078\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u5f37\u304f\u63a8\u5968\u3057\u3066\u3044\u308b\u3002\n\nCVE-2026-63077 \uff08CVSS\u30b9\u30b3\u30a2\uff1a9.8\uff09\u3068\u3057\u3066\u5272\u308a\u5f53\u3066\u3089\u308c\u305f\u3053\u306e\u8106\u5f31\u6027\u306f\u3001TeamCity\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\u306e\u3059\u3079\u3066\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u5f71\u97ff\u3057\u307e\u3059\u3002\u30d0\u30fc\u30b8\u30e7\u30f32025.11.7\u304a\u3088\u30732026.1.3\u3067\u4fee\u6b63\u6e08\u307f\u3067\u3059\u3002TeamCity\u30af\u30e9\u30a6\u30c9\u7248\u306f\u65e2\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3055\u308c\u3066\u3044\u307e\u3059\u3002JetB...", "creation_timestamp": "2026-08-27T00:05:30.156110Z"} 2026-08-27T00:05:30.156110+00:00 https://vulnerability.circl.lu/sighting/f605c418-ac40-437a-b85f-cc80a788b251/export 2026-08-29T17:01:53.088054+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f605c418-ac40-437a-b85f-cc80a788b251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtxhkoxwbk2y", "content": "\u300cTeamCity\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u4fee\u6b63\n\n\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u30d3\u30eb\u30c9\u3084\u30c6\u30b9\u30c8\u3001\u81ea\u52d5\u914d\u5e03\u306a\u3069\u306e\u6a5f\u80fd\u3092\u63d0\u4f9b\u3059\u308bJetBrains\u306eCI/CD\u30b5\u30fc\u30d0\u300cTeamCity\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\n\u540c\u88fd\u54c1\u306e\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\u306b\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u4efb\u610f\u306eOS\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u8106\u5f31\u6027\u300cCVE-2026-63077\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u30022026\u5e747\u670810\u65e5\u306b\u975e\u516c\u958b\u306e\u3082\u3068\u5831\u544a\u3092\u53d7\u3051\u305f\u3068\u3044\u3046\u3002\n\n\u300cTeamCity\u300d\u306e\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u30dd\u30fc\u30ea\u30f3\u30b0\u30d7\u30ed\u30c8\u30b3\u30eb\u3092\u4ecb\u3057\u3066\u8a8d\u8a3c\u30c1\u30a7\u30c3\u30af\u3092\u56de\u907f\u3057\u3001HTTP\u307e\u305f\u306fHTTPS\u7d4c\u7531\u3067\u300cTeamCity Server\u300d\u3078\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u5834\u5408\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u30b3...", "creation_timestamp": "2026-08-26T04:09:05.612438Z"} 2026-08-26T04:09:05.612438+00:00