{"vulnerability": "CVE-2026-63077", "sightings": [{"uuid": "6c077264-9dfc-435a-90b7-833e017b191b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrtmnkbitj2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63077: 32 interactions\nCVE-2026-50522: 15 interactions\nCVE-2026-54121: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-63077: 11 interactions\nCVE-2026-42897: 9 interactions\nCVE-2026-47876: 6 interactions\n", "creation_timestamp": "2026-07-30T04:39:08.322572Z"}, {"uuid": "11bd5aa3-4592-4454-afbd-420e6945e8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrts5a5nho2w", "content": "JetBrains patches critical TeamCity On-Premises vulnerability CVE-2026-63077 (CVSS 9.8), preventing unauthenticated remote code execution.\n\n#TeamCity #JetBrains #CVE202663077 #Cybersecurity #CICD", "creation_timestamp": "2026-07-30T06:17:23.316807Z"}, {"uuid": "bf2780cc-a235-45e0-a6e2-edd4339e793e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msa7gdsqch2o", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 42 interactions\nCVE-2026-63077: 35 interactions\nCVE-2026-18577: 30 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-18577: 30 interactions\nCVE-2026-51302: 4 interactions\nCVE-2026-45820: 3 interactions\n", "creation_timestamp": "2026-08-04T04:47:06.671880Z"}, {"uuid": "b521e820-b639-424d-bd0d-cde53bbc12de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63077", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117038268463852283", "content": "\ud83d\udcf0 JetBrains Patches Critical Unauthenticated RCE Flaw in TeamCity\n\ud83d\udea8 CRITICAL ALERT: JetBrains patches CVE-2026-63077, a 9.8 CVSS unauthenticated RCE in TeamCity On-Premises. All versions affected. Exploit allows full server takeover. Upgrade immediately to prevent supply chain attacks! #TeamCity #CI/CD #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/jetbrains-patches-critical-unauthenticated-rce-flaw-cve-2026-63077-in-teamcity/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-04T16:50:52.281891Z"}, {"uuid": "c59e1646-be62-4678-b506-ef78dd35c65d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mrvkvf4zxu2p", "content": "A critical unauthenticated RCE (CVE-2026-63077) in JetBrains TeamCity On-Premises means attackers can execute arbitrary commands without credentials. This isn't just a server compromise; it's a direct threat to your entire software\u2026\n\nhttps://www.tpp.blog/25zvvw6\n\n#cybersecurity #jetbrains #teamcity", "creation_timestamp": "2026-07-30T23:13:03.407769Z"}, {"uuid": "2c826d17-a1c9-4910-afa1-ad7d726090bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrvnkjjdhu2i", "content": "JetBrains TeamCity On-Premises hit by CRITICAL RCE (CVE-2026-63077) via HTTPS auth bypass. All versions affected \u2014 patch now or apply security plugin. TeamCity Cloud not impacted. Details: https://radar.offseq.com/threat/jetbrains-warns-of-critical-teamcity-remote-code-execution-flaw-b5d2b338dff8...", "creation_timestamp": "2026-07-31T00:00:40.299010Z"}, {"uuid": "3ff31fa5-7eb4-4afe-b34a-511c5296da29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "Telegram/-yvSoR82NqkZYRFAJ0RPwns7oo0m2sVtQANb6s2__TWozPg", "content": "", "creation_timestamp": "2026-07-31T03:00:03.345723Z"}, {"uuid": "3dc1506c-85c0-4ef7-9581-613430c91f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrw6k4w2zo2x", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 39 interactions\nCVE-2026-63077: 32 interactions\nCVE-2026-54121: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-66066: 33 interactions\nCVE-2026-59726: 9 interactions\nCVE-2026-20316: 6 interactions\n", "creation_timestamp": "2026-07-31T05:04:40.687136Z"}, {"uuid": "e8f06491-1a69-45e8-b608-4d4385bddba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrwer3kdzk2s", "content": "\ud83e\udd16 CVE-2026-63077: critical auth bypass in TeamCity On-Premises via agent polling protocol \u2192 RCE as server process. All versions affected; patched in 2025.11.7/2026.1.3.\nhttps://www.bleepingcomputer.com/news/security/jetbrains-warns-of-critical-teamcity-remote-code-execution-flaw/", "creation_timestamp": "2026-07-31T06:55:56.104636Z"}, {"uuid": "2d356436-9641-4c9e-8100-bbab0cd4be49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mrwfurh5ut2r", "content": "CVE-2026-63077 enables unauthenticated HTTP/S exploitation of TeamCity On-Premises to bypass authentication and execute remote code with server privileges.\n", "creation_timestamp": "2026-07-31T07:15:53.977446Z"}, {"uuid": "a7d77e1e-8ab7-4eb2-a7fa-b919df35700e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "Telegram/SpHcF5o5W-zb5RnmDP-EoqwVpXHZEobhM5Z8fIn-sbJxq28", "content": "", "creation_timestamp": "2026-07-31T08:00:03.881199Z"}, {"uuid": "6874d44b-d026-4c43-9032-06e9a722e50b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrwk45oinb2j", "content": "CVE-2026-63077: JetBrains Patched a Critical Flaw But You\u2019re Still Vulnerable #CyberSecurity #Vulnerability #TeamCity", "creation_timestamp": "2026-07-31T08:31:37.037006Z"}, {"uuid": "40a8805e-9615-4d7b-9ea0-934dfaba9247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrwk4fp5ki2v", "content": "CVE-2026-63077: Did JetBrains Underestimate the Risk of TeamCity's Patch? #CVE2026 #JetBrains #TeamCity", "creation_timestamp": "2026-07-31T08:31:44.727169Z"}, {"uuid": "9e498d1a-ca5d-4aa9-905a-22661568787b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrwk47awe72m", "content": "CVE-2026-63077: JetBrains' Delay in Securing TeamCity Is Your Risk #CVE2026 #CyberSecurity #JetBrains", "creation_timestamp": "2026-07-31T08:31:37.946033Z"}, {"uuid": "84a070d8-edd7-49fa-a335-44aff41e17ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrwk4askrz2j", "content": "CVE-2026-63077: JetBrains' Patch Leaves Unanswered Questions on Security Measures #CVE2026 #JetBrains #TeamCity", "creation_timestamp": "2026-07-31T08:31:40.095925Z"}, {"uuid": "2e3319d4-6e7e-4f1a-88fc-35bd1faffa1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrwk4chayo2w", "content": "CVE-2026-63077: JetBrains' Patch Is Just a Bandage Over Process Flaws #CVE2026 #JetBrains #TeamCity", "creation_timestamp": "2026-07-31T08:31:41.431804Z"}, {"uuid": "35541e44-fea5-4cf9-9182-2dc60ff0421f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrwk4e5pif2u", "content": "CVE-2026-63077: JetBrains Offers a Patch, But Where's the Evidence of Risk? #CVE2026 #JetBrains #TeamCity", "creation_timestamp": "2026-07-31T08:31:43.924206Z"}, {"uuid": "3ccad502-1614-4fd1-b50f-65909d91316d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrwkuryyoy2h", "content": "JetBrains disclosed CVE-2026-63077, a critical auth bypass in TeamCity On-Premises that can lead to remote code execution over HTTPS. Fixed in 2025.11.7 and 2026.1.3. #JetBrains #TeamCity #CVE-2026-63077", "creation_timestamp": "2026-07-31T08:45:22.829200Z"}, {"uuid": "ac317e3d-b222-4c3e-ab9b-8f8015ad2179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrwmpft4hd2m", "content": "TeamCity\u306b\u8a8d\u8a3c\u4e0d\u8981\u3067\u60aa\u7528\u53ef\u80fd\u306a\u6df1\u523b\u306a\u30b3\u30fc\u30c9\u5b9f\u884c\u8106\u5f31\u6027(CVE-2026-63077)\u304c\u4fee\u6b63\u3055\u308c\u307e\u3057\u305f\u3002", "creation_timestamp": "2026-07-31T09:18:09.456284Z"}, {"uuid": "cb76b1a2-4496-47d0-af20-3d540d555f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3mrwofauvly2d", "content": "JetBrains emitiu um aviso urgente sobre uma vulnerabilidade cr\u00edtica no TeamCity On-Premises que pode ser aproveitada para execu\u00e7\u00e3o remota de c\u00f3digo. A falha \u00e9 registada sob CVE-2026-63077. \n\n#alerta #falha #teamcity ", "creation_timestamp": "2026-07-31T09:48:16.928016Z"}, {"uuid": "aa2a68e7-7ff7-485f-939b-ecab47e87136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mrwosqrsoz23", "content": "JetBrains TeamCity Hit by Critical CVE-2026-63077: Unauthenticated Attackers Could Take Control of On-Premises Servers +\u00a0Video\n\nA New TeamCity Security Crisis Puts CI/CD Infrastructure Under Pressure A critical security vulnerability in JetBrains TeamCity On-Premises has emerged as one of the most\u2026", "creation_timestamp": "2026-07-31T09:55:50.603857Z"}, {"uuid": "6edf2314-b2d1-484e-b87e-e784d57524e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/information_security_channel/55654", "content": "Critical Code Execution Vulnerability Patched in TeamCity\u00a0\nhttps://www.securityweek.com/critical-code-execution-vulnerability-patched-in-teamcity/\n\nTracked as CVE-2026-63077, the security defect can be exploited without authentication via the agent polling protocol.\nThe post Critical Code Execution Vulnerability Patched in TeamCity\u00a0 (https://www.securityweek.com/critical-code-execution-vulnerability-patched-in-teamcity/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-31T10:00:04.735632Z"}, {"uuid": "f6df7688-1add-4ae6-8a5b-149fce1f9659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrwuoanprn2e", "content": "TeamCity patched an unauthenticated code execution flaw, CVE-2026-63077, in its agent polling protocol. Time to drop everything for another emergency update.\n\n#patchday #teamcityfail", "creation_timestamp": "2026-07-31T11:40:41.036928Z"}, {"uuid": "ccea585f-6360-4d11-834c-896cba4e01c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrwuodaqqb2g", "content": "Just what we needed on a Friday, TeamCity reveals a critical code execution defect tracked as CVE-2026-63077 lurking inside its agent polling protocol. Naturally, any opportunistic attacker can exploit this flaw completely without authentication, ruining what little peace we had ...\n\nRead full story", "creation_timestamp": "2026-07-31T11:40:43.237289Z"}, {"uuid": "e6b8fcea-96a9-4361-9c36-283f2ed026c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrx65fazmu22", "content": "JetBrains' TeamCity faces critical CVE-2026-63077 vulnerability; update now to prevent remote code execution risks. #JetBrains #TeamCity #CVE202663077 #CyberSecurity #RemoteCodeExecution thedailytechfeed.com/critical-jet...", "creation_timestamp": "2026-07-31T14:30:16.225068Z"}, {"uuid": "24ca64b0-7acb-4b41-ac63-e38175a56efb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mrxazxv3632z", "content": "Critical Security Issue Affecting TeamCity On-Premises (CVE-2026-63077) #patchmanagement", "creation_timestamp": "2026-07-31T15:21:58.882294Z"}, {"uuid": "1f880e43-f89e-4629-a3f0-7f3a0d6178be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mrxhohsn6s2o", "content": "\ud83d\udea8A critical JetBrains TeamCity vulnerability CVE-2026-63077 could allow unauthenticated RCE on Internet-facing servers.\n\nCensys sees ~4,500 TeamCity web properties.\n\u25aa\ufe0fNo active exploitation has been reported by JetBrains.\n\u25aa\ufe0fPatches are available \n\nhttps://bit.ly/45DhGIQ", "creation_timestamp": "2026-07-31T17:20:50.209140Z"}, {"uuid": "26fa4fbd-cac2-4fb9-8994-78e9f248ff0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mrxllznkpw2w", "content": "CVE-2026-63077 could let unauthenticated attackers bypass TeamCity checks and run OS commands; JetBrains patched all on-premises versions.", "creation_timestamp": "2026-07-31T18:31:03.327640Z"}, {"uuid": "75b1b687-380b-4a0b-b6a9-fb653d772f06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/information_security_channel/55654", "content": "Critical Code Execution Vulnerability Patched in TeamCity\u00a0\nhttps://www.securityweek.com/critical-code-execution-vulnerability-patched-in-teamcity/\n\nTracked as CVE-2026-63077, the security defect can be exploited without authentication via the agent polling protocol.\nThe post Critical Code Execution Vulnerability Patched in TeamCity\u00a0 (https://www.securityweek.com/critical-code-execution-vulnerability-patched-in-teamcity/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-01T00:00:34.549301Z"}, {"uuid": "3a2f0f2a-288f-4f3f-83d6-9f0ed1bed23e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "Telegram/SpHcF5o5W-zb5RnmDP-EoqwVpXHZEobhM5Z8fIn-sbJxq28", "content": "", "creation_timestamp": "2026-08-01T00:00:36.640002Z"}, {"uuid": "1cb059a2-9257-4496-b5ee-a01a65570a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "Telegram/-yvSoR82NqkZYRFAJ0RPwns7oo0m2sVtQANb6s2__TWozPg", "content": "", "creation_timestamp": "2026-08-01T00:00:43.071068Z"}, {"uuid": "c4fa01e8-d293-419b-8e57-b7d62689d15a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mryoodbpnu2r", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 39 interactions\nCVE-2026-63077: 35 interactions\nCVE-2026-16232: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-14540: 3 interactions\nCVE-2026-16232: 3 interactions\nCVE-2026-51371: 3 interactions\n", "creation_timestamp": "2026-08-01T04:58:42.997627Z"}, {"uuid": "5875a46d-3765-427c-b1ff-b7740913be1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3msjaf2ozji2j", "content": "We have published our \n@rapid7\n analysis of CVE-2026-63077, an unauth RCE in JetBrains TeamCity that was disclosed last week and already added to KEV as being exploited in the wild. Check out our ful\u2026\n\n\ud83d\udd01 RT @stephenfewer | reposted by @HackingLZ\nhttps://x.com/stephenfewer/status/2085754680370442280", "creation_timestamp": "2026-08-07T18:58:12.986135Z"}, {"uuid": "ee9cffbd-8264-4184-9d91-e539f7a1dbc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "Telegram/-BHLnKr5fTYXcsnVodGd6aY5MyRSkbDYbShjgAtpVsYLmOM", "content": "", "creation_timestamp": "2026-08-07T20:00:04.615732Z"}, {"uuid": "6aae3a66-3658-4312-ad82-dcd86c63eefc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mscqx5qx7a2u", "content": "CVE-2026-63077: Critical RCE in JetBrains TeamCity, CVSS 9.8", "creation_timestamp": "2026-08-05T05:06:01.836122Z"}, {"uuid": "b182a404-78ec-4c34-8e71-aa202343cc5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "Telegram/-BHLnKr5fTYXcsnVodGd6aY5MyRSkbDYbShjgAtpVsYLmOM", "content": "", "creation_timestamp": "2026-08-08T00:02:15.646843Z"}, {"uuid": "a7e80b17-0ed9-46ba-a526-8e07cd76fddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/bdufstecru/3368", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (CI/CD) JetBrains TeamCity \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\n\nBDU:2026-11140\nCVE-2026-63077\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.jetbrains.com/privacy-security/issues-fixed/", "creation_timestamp": "2026-08-08T00:06:20.106640Z"}, {"uuid": "d1ee781d-ba35-4e25-9ee3-044d18479cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/23634", "content": "CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild \u2013 thehackernews.com\n\nThu, 06 Aug 2026 14:51:43", "creation_timestamp": "2026-08-22T04:00:20.966564Z"}, {"uuid": "aba7455c-5bb8-48b8-a5e1-014063cda74e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "Telegram/isYPSVfmLV-yXhFUvFv7aAeBp2-cYNaaRPY4UoKoJUaHcQ", "content": "", "creation_timestamp": "2026-08-08T00:17:14.058655Z"}, {"uuid": "7057551d-d711-46f7-8055-6a986f996c75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mta3xvaxip2o", "content": "JetBrains TeamCity\uff08\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\uff09\u306b\u304a\u3051\u308b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u8106\u5f31\u6027\uff08CVE-2026-63077\uff09\u306b\u3064\u3044\u3066  #JPCERTCC (Aug 13)\n\nwww.jpcert.or.jp/newsflash/20...", "creation_timestamp": "2026-08-16T21:10:29.626809Z"}, {"uuid": "f88c966b-d0b3-4251-9730-db9011e81ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msk3yaxz7s2p", "content": "Top 3 CVE for last 7 days:\nCVE-2026-18577: 42 interactions\nCVE-2026-64564: 21 interactions\nCVE-2026-58048: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-64564: 20 interactions\nCVE-2026-63077: 5 interactions\nCVE-2026-64561: 4 interactions\n", "creation_timestamp": "2026-08-08T03:12:07.809723Z"}, {"uuid": "545ada18-dd13-4626-88f7-179cf23d7d48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63077", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3msvyrfetls2s", "content": "Wednesday's fuck up - This Time - JetBrains - Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077) github.com/sfewer-r7/CV... \nBlog: www.rapid7.com/blog/post/ra... #critical #RCE #rce #jetbrains #teamcity #cve-2026-63077 #fuck #up", "creation_timestamp": "2026-08-12T10:46:49.152664Z"}, {"uuid": "b63f0408-a441-47b7-ba88-a1f406456d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/pphm_HackerNews/2478", "content": "\ud83d\udd34 Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability\n\nThreat actors have started exploiting a recently patched vulnerability in JetBrains TeamCity, the US cybersecurity agency CISA warns.\n\nA continuous integration and continuous delivery (CI/CD) platform, TeamCity provides automated software building and deployment and is a central component of enterprise workflows, collaboration, and development practices.\n\nTracked as CVE-2026-63077 (CVSS score of 9.8), the critical security defect is related to deserialization of untrusted data and allows unauthenticated attackers to achieve remote code execution (RCE) via HTTP/S requests.", "creation_timestamp": "2026-08-21T23:00:06.975515Z"}, {"uuid": "7451d21f-28e6-4117-acc8-a7b23796181a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "Telegram/WyJeh4sowO0Z9yT0YeUfsQh0ExYwp-IUqMrkBsywhW7xxIQ", "content": "", "creation_timestamp": "2026-08-08T11:02:16.349814Z"}, {"uuid": "694320ce-70b3-4bb0-ade1-24c411ebbbd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/405", "content": "Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)\n\nBlog: https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077/", "creation_timestamp": "2026-08-08T12:03:58.956898Z"}, {"uuid": "d9536536-ca7d-41d7-955f-09c79a2b2c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "Telegram/_6WiR0p1XSX2Nc0kJrGm37A_Y4R5JUMfMftgMiyMuKNyYsM", "content": "", "creation_timestamp": "2026-08-08T23:17:23.915635Z"}, {"uuid": "ed6f84b4-89ee-431c-ae32-6118ae6f7857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "Telegram/wFizrrbAMDFnDVCm6fOMsyo-M7GcVmnQt0S9VRUliYzF6W4", "content": "", "creation_timestamp": "2026-08-09T00:18:54.429006Z"}, {"uuid": "1df7b00d-f3b5-4c36-a9b7-c1a126262dee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mse3ojzfjq26", "content": "\ud83d\uded1 CVE-2026-63077\nJetBrains TeamCity\nCVSS 9.8 / EPSS 1% / KEV \u2705\nTL;DR: In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was\u2026\nhttps://cvesentinel.com/report/CVE-2026-63077?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-05T17:50:43.308029Z"}, {"uuid": "dd8f0425-dc3b-4666-a586-eea25478dd44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "Telegram/_6WiR0p1XSX2Nc0kJrGm37A_Y4R5JUMfMftgMiyMuKNyYsM", "content": "", "creation_timestamp": "2026-08-09T00:38:02.089389Z"}, {"uuid": "e8190088-2850-414a-8923-0647049a6f11", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/326e4a41-68fa-4df5-8762-e7ed3bc289fc", "content": "", "creation_timestamp": "2026-08-05T18:00:01.843002Z"}, {"uuid": "2a5a9e9d-7410-45c1-9da5-088c2f2811d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "Telegram/WyJeh4sowO0Z9yT0YeUfsQh0ExYwp-IUqMrkBsywhW7xxIQ", "content": "", "creation_timestamp": "2026-08-09T00:46:43.318967Z"}, {"uuid": "7243ed9b-33bb-49dd-b7ad-9f9af06e0342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/405", "content": "Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)\n\nBlog: https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077/", "creation_timestamp": "2026-08-09T00:46:43.353671Z"}, {"uuid": "d4f0b2d2-111d-4806-a262-69a2bd734a99", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ea753bd3-3d48-4bc2-9fe1-286487e6868f", "content": "", "creation_timestamp": "2026-08-05T18:00:26.062502Z"}, {"uuid": "2a8a570a-0806-4fa0-aa69-d688047b5367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mse7ksewko2u", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0805)\n\n\u26a0\ufe0f CVE-2026-63077 - JetBrains TeamCity Deserialization of Untrusted Data Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-08-05T19:00:25.455295Z"}, {"uuid": "1188c228-0c2d-448a-8771-efd07d5bcd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3msebboyb432u", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.   CVE-2026-63077 JetBrains TeamCity\u2026\n\n\ud83d\udd17 https://hnow.live/a/310016bb", "creation_timestamp": "2026-08-05T19:30:54.938914Z"}, {"uuid": "a187faf0-a172-4453-a5d0-cfac36068651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msvdddqk4c2c", "content": "\u26a0\ufe0f TeamCity CVE-2026-63077, CVSS 9.8. Unauthenticated RCE, actively exploited, on CISA's KEV list. Patch on premise servers today, not this sprint. (The Hacker News)", "creation_timestamp": "2026-08-12T14:22:53.952362Z"}, {"uuid": "7e3da074-5cd8-458a-b217-6276f0832f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msvdddrzxk2c", "content": "\u26a0\ufe0f TeamCity CVE-2026-63077, CVSS 9.8. Unauthenticated RCE, actively exploited, on CISA's KEV list. Patch on premise servers today, not this sprint. (The Hacker News)", "creation_timestamp": "2026-08-12T14:22:54.933723Z"}, {"uuid": "8b30e5ea-654c-4d87-887b-bafd71bf91f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msvddds3w22c", "content": "\u26a0\ufe0f TeamCity CVE-2026-63077, CVSS 9.8. Unauthenticated RCE, actively exploited, on CISA's KEV list. Patch on premise servers today, not this sprint. (The Hacker News)", "creation_timestamp": "2026-08-12T14:22:55.921156Z"}, {"uuid": "12a85246-2f51-4756-97f0-9586fe541419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msvddds6ts2c", "content": "\u26a0\ufe0f TeamCity CVE-2026-63077, CVSS 9.8. Unauthenticated RCE, actively exploited, on CISA's KEV list. Patch on premise servers today, not this sprint. (The Hacker News)", "creation_timestamp": "2026-08-12T14:22:57.846656Z"}, {"uuid": "5cc9a855-606e-4b4b-a946-b54de800eff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msvdddsbrk2c", "content": "\u26a0\ufe0f TeamCity CVE-2026-63077, CVSS 9.8. Unauthenticated RCE, actively exploited, on CISA's KEV list. Patch on premise servers today, not this sprint. (The Hacker News)", "creation_timestamp": "2026-08-12T14:23:00.649232Z"}, {"uuid": "6792375d-b37b-47c7-811e-be1a7908ace4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msvddds4vc2c", "content": "\u26a0\ufe0f TeamCity CVE-2026-63077, CVSS 9.8. Unauthenticated RCE, actively exploited, on CISA's KEV list. Patch on premise servers today, not this sprint. (The Hacker News)", "creation_timestamp": "2026-08-12T14:22:56.863906Z"}, {"uuid": "d3f46388-691a-4dc4-bb7c-5aa0a04c2181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msvdddsasc2c", "content": "\u26a0\ufe0f TeamCity CVE-2026-63077, CVSS 9.8. Unauthenticated RCE, actively exploited, on CISA's KEV list. Patch on premise servers today, not this sprint. (The Hacker News)", "creation_timestamp": "2026-08-12T14:22:59.681964Z"}, {"uuid": "632364ce-5784-4fc4-9a70-baeb04aee82e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msvddds7t22c", "content": "\u26a0\ufe0f TeamCity CVE-2026-63077, CVSS 9.8. Unauthenticated RCE, actively exploited, on CISA's KEV list. Patch on premise servers today, not this sprint. (The Hacker News)", "creation_timestamp": "2026-08-12T14:22:58.771722Z"}, {"uuid": "dd3cacc2-a9cd-4042-97a9-0720ef2ef37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/jetbrains-security-advisory-av26-752", "content": "", "creation_timestamp": "2026-08-05T20:15:03.565329Z"}, {"uuid": "57856a97-fa8b-42d9-9c85-632e9b9ffc4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msedrsu4dv2j", "content": "Critical JetBrains TeamCity Flaw Lets Unauthenticated Attackers Execute Commands \u2014 CVE-2026-63077 Rated 98 Critical +\u00a0Video\n\nA Dangerous Weakness Inside the CI/CD Pipeline Modern software development depends on automation. Developers push code, continuous integration systems compile it, tests run\u2026", "creation_timestamp": "2026-08-05T20:15:43.644753Z"}, {"uuid": "b2db9db4-eede-4255-aff1-d4f40a61bf59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/pphm_HackerNews/2383", "content": "\ud83d\udd34 Critical Code Execution Vulnerability Patched in TeamCity \n\nJetBrains this week rolled out patches for a critical-severity vulnerability in TeamCity On-Premises that can be exploited without authentication.\n\nTracked as CVE-2026-63077 (CVSS score of 9.8), the security defect can be exploited via HTTP/S to bypass authentication and achieve remote code execution (RCE).\n\n\u201cAn unauthenticated attacker could exploit the vulnerability via the TeamCity agent polling protocol to bypass authentication checks and execute arbitrary operating system commands with the privileges of the TeamCity server process,\u201d JetBrains explains in its advisory.", "creation_timestamp": "2026-08-21T23:00:07.090298Z"}, {"uuid": "7082b61d-07c1-4952-bc5b-2eda5c5548d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mseey7yrgt2a", "content": "\ud83d\udea8 CISA KEV ALERT: CVE-2026-63077 exposes JetBrains TeamCity servers to unauthenticated RCE via untrusted deserialization. Active exploitation confirmed. Get the forensic breakdown, CrowdStrike CQL detection logic, and CI/CD hardening steps: https://thecybermind.co/oapr", "creation_timestamp": "2026-08-05T20:37:12.294534Z"}, {"uuid": "625cfd17-2edc-47d1-a198-2487c5893941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://t.me/cibsecurity/90297", "content": "\ud83d\udd8b\ufe0f CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild \ud83d\udd8b\ufe0f\n\nA newly patched security flaw impacting onpremise versions of JetBrains TeamCity has come under active exploitation in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency CISA.  The vulnerability in question is CVE202663077 CVSS score 9.8, a case of deserialization of untrusted data that could allow an unauthenticated attacker with access to a TeamCity server.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-08-09T09:01:40.456719Z"}, {"uuid": "497dacb6-ad74-4483-9986-66ae0d3bbe5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-63077.yaml", "content": "", "creation_timestamp": "2026-08-09T18:00:04.315867Z"}, {"uuid": "9bbe1d5d-dedf-45b1-b0b5-76efb4485ef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/smartdeels.bsky.social/post/3msod57j4ba2c", "content": "Stay ahead of hackers! With the active exploitation of TeamCity's CVE-2026-63077, now's the time to bolster your cybersecurity. #CyberSecurity #TeamCity", "creation_timestamp": "2026-08-09T19:30:49.983644Z"}, {"uuid": "cf320497-18e3-4c88-92ef-ad25919df8b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/smartdeels06.bsky.social/post/3msod65nq4b2d", "content": "As we celebrate National Book Lovers Day, let's not forget about the books on cybersecurity that could save your business from hacks like CVE-2026-63077. #NationalBookLoversDay #CyberSecurity", "creation_timestamp": "2026-08-09T19:31:21.690491Z"}, {"uuid": "3087faa3-196e-462a-aba1-8be5b1e32bb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-63077.yaml", "content": "", "creation_timestamp": "2026-08-10T00:00:03.681383Z"}, {"uuid": "fe34b246-484b-4350-97e2-87d886aae47a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://t.me/cibsecurity/90297", "content": "\ud83d\udd8b\ufe0f CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild \ud83d\udd8b\ufe0f\n\nA newly patched security flaw impacting onpremise versions of JetBrains TeamCity has come under active exploitation in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency CISA.  The vulnerability in question is CVE202663077 CVSS score 9.8, a case of deserialization of untrusted data that could allow an unauthenticated attacker with access to a TeamCity server.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-08-10T00:00:28.226830Z"}, {"uuid": "161753d1-d04d-4ffb-a852-92d65e40994f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msew4mrzhu2q", "content": "TeamCity vulnerability CVE-2026-63077 enables unauthenticated remote code execution. CISA added it to the KEV catalog amid active exploitation.\n\n#TeamCity #CVE202663077 #RCE #CISA #KEV #CyberSecurity", "creation_timestamp": "2026-08-06T01:43:54.338027Z"}, {"uuid": "f59fe369-c5e6-4eda-acaa-08b833abc27e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3msf32qdbek2p", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds One Known Exploited Vulnerability to Catalog  #CISA (Aug 5)\n\nCVE-2026-63077 JetBrains TeamCity\u306b\u304a\u3051\u308b\u4fe1\u983c\u3067\u304d\u306a\u3044\u30c7\u30fc\u30bf\u306e\u9006\u30b7\u30ea\u30a2\u30eb\u5316\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-08-06T03:12:18.959606Z"}, {"uuid": "40dff66f-af88-4789-a48b-542de68a3622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msovo6mcyp2n", "content": "CVE-2026-63077: TeamCity RCE Exploited in the Wild", "creation_timestamp": "2026-08-10T01:02:26.362387Z"}, {"uuid": "4d27bc76-136f-4152-b7dd-2572c9ceddc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mspisn7msf2n", "content": "CVE-2026-63077 is trending. Hype score 2, currently #7 on cvemon.\n\nIn JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol\n\nhttps://cvemon.intruder.io/cves/CVE-2026-63077", "creation_timestamp": "2026-08-10T06:44:57.520837Z"}, {"uuid": "79825ce8-5017-4787-8310-4697a24f7fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mspmyzn6b42h", "content": "TeamCity CVE-2026-63077 (CVSS 9.8): unauthenticated RCE via agent polling protocol. No login needed. CISA confirmed active exploitation, KEV deadline was Aug 8. Patch to 2026.1.3 / 2025.11.7 now.\n\n\ud83c\uddec\ud83c\udde7 zurl.co/nEdNe\n\ud83c\udde9\ud83c\uddea zurl.co/saisP  \n\n#CyberSecurity #CISA #DevSecOps", "creation_timestamp": "2026-08-10T08:00:06.851573Z"}, {"uuid": "dd190903-b120-462e-ac46-5dd819f63613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3msffj5hmpx2t", "content": "CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-63077 JetBrains TeamCity Deserialization o...\n\n\ud83d\udd17 https://www.cisa.gov/news-events/alerts/2026/08/05/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-08-06T06:19:19.664135Z"}, {"uuid": "41f0c656-1b53-4ead-9802-e19660c85fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3msfft7u2zs25", "content": "CVE-2026-63077: CISA warnt vor aktiver Ausnutzung einer TeamCity-Sicherheitsl\u00fccke - Angreifer k\u00f6nnen ohne Authentifizierung Schadcode auf dem Server ausf\u00fchren. \n\nwww.all-about-security.de/cve-2026-630...\n\n#itsecurity #itsicherheit #cve", "creation_timestamp": "2026-08-06T06:25:01.227498Z"}, {"uuid": "1e89bcb4-ab40-4e71-928c-ece931389b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3msq2glaumo2l", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-18577, CVE-2026-66066, CVE-2026-63077, CVE-2026-20200, CVE-2026-58048\nActors: Apt, Ransomware, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-08-10T12:00:19.594253Z"}, {"uuid": "f105047a-624a-44d9-9895-2494ae274544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3msfheit6x32m", "content": "CVE-2026-63077 in JetBrains TeamCity enables unauthenticated remote code execution via untrusted deserialization, requiring immediate patching of on-prem deployments.\n", "creation_timestamp": "2026-08-06T06:52:31.721199Z"}, {"uuid": "ce4563d7-2235-48ab-8590-e2770295571b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3msfhpcdwrw2y", "content": "CISA warns of active exploitation of JetBrains TeamCity CVE-2026-63077; immediate patching advised to prevent unauthorized command execution. #CISA #TeamCity #CVE202663077 #RCE #CyberSecurity thedailytechfeed.com/cisa-alerts-...", "creation_timestamp": "2026-08-06T06:58:35.065459Z"}, {"uuid": "c1150759-0c4d-492a-b6fd-c9c065009a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msfhuapqbp2d", "content": "CISA waarschuwt voor kritieke kwetsbaarheid in JetBrains TeamCity die actief wor\n\nDe U.S. Cybersecurity and Infrastructure Security Agency (CISA) heeft een waarschuwing uitgegeven voor een kritieke kwetsbaarheid, aangeduid als CVE-2026-63077, in JetBrains TeamCity. Deze kwetsbaarheid wordt m...", "creation_timestamp": "2026-08-06T07:01:20.674665Z"}, {"uuid": "617b01d9-b565-436f-8096-21d84c8027de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/information_security_channel/55692", "content": "Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability\nhttps://www.securityweek.com/hackers-start-exploiting-recent-jetbrains-teamcity-vulnerability/\n\nTracked as CVE-2026-63077, the critical bug can be exploited without authentication for remote code execution.\nThe post Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability (https://www.securityweek.com/hackers-start-exploiting-recent-jetbrains-teamcity-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-06T08:00:04.209968Z"}, {"uuid": "73b1d0a6-c134-44ea-8cc1-c05a48e43323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://t.me/thehackernews/9724", "content": "\ud83d\udea8 On-premise TeamCity is under attack.\n\nCISA says attackers are exploiting CVE-2026-63077 in the wild. The 9.8-rated flaw can let unauthenticated attackers run OS commands, putting stored credentials, build artifacts, and downstream CI/CD pipelines at risk.\n\nWhat is known so far \ud83e\udc16 https://thehackernews.com/2026/08/cisa-flags-teamcity-cve-2026-63077-rce.html", "creation_timestamp": "2026-08-06T08:00:04.369610Z"}, {"uuid": "cc594143-02a9-4328-ab34-ee15bae55fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3msflvk2x6k2q", "content": "CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild reconbee.com/cisa-flags-t...\n\n#CISA #cybersecurity #RCEflaw #cyberattack #TeamCity", "creation_timestamp": "2026-08-06T08:13:43.862681Z"}, {"uuid": "99d751f6-6477-4dce-9b61-2e2ab6597073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msfnz6pcz32v", "content": "JetBrains TeamCity on-premise\u7248\u3067\u3001\u8a8d\u8a3c\u4e0d\u8981\u306a\u653b\u6483\u8005\u304c\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\u306a\u8106\u5f31\u6027(CVE-2026-63077)\u304c\u78ba\u8a8d\u3055\u308c\u3001\u73fe\u5728\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-08-06T08:51:31.859083Z"}, {"uuid": "a27a206f-390c-49fb-93e9-58c27075e2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63077", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msfo3rewrj2d", "content": "\ud83e\udd16 CISA added CVE-2026-63077 (CVSS 9.8) to KEV: unauthenticated RCE in JetBrains TeamCity via deserialization, actively exploited in the wild. On-premise servers affected \u2014 patch now.\nhttps://thehackernews.com/2026/08/cisa-flags-teamcity-cve-2026-63077-rce.html", "creation_timestamp": "2026-08-06T08:52:54.770489Z"}, {"uuid": "31526cd4-5b13-46de-a7f1-fb065525adee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/ctinow/254640", "content": "CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild\nhttps://ift.tt/HYNxqlP", "creation_timestamp": "2026-08-06T09:00:04.930689Z"}, {"uuid": "7c014e84-6d9c-4104-a19b-1cd5e73dc299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63077", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3msfpguwsxk2c", "content": "CISA Flags Actively Exploited TeamCity RCE \u2014 CVE-2026-63077 Needs an Immediate Patch\n\nhttps://blindthoughts.com/teamcity-cve-2026-63077-rce-active-exploitation\n\n#remotecodeexecution #cicd #cisa #supplychainsecurity #patchnow", "creation_timestamp": "2026-08-06T09:17:01.041148Z"}, {"uuid": "d87d9d9c-ac78-422a-9476-5519d51efc0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://thehackernews.com/2026/08/cisa-flags-teamcity-cve-2026-63077-rce.html", "content": "A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active exploitation in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA).\n\nThe vulnerability in question is CVE-2026-63077 (CVSS score: 9.8), a case of deserialization of untrusted data that could allow an unauthenticated attacker with access to a TeamCity server", "creation_timestamp": "2026-08-06T10:00:44.155055Z"}, {"uuid": "0f2262ef-1ca7-4f3d-91a9-bbfd12d5959d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msfruicq2q24", "content": "CISA says attackers are exploiting CVE-2026-63077, a critical TeamCity flaw that can enable unauthenticated remote code execution over HTTP/S. All TeamCity On-Premises versions are affected. #TeamCity #CISA #JetBrains", "creation_timestamp": "2026-08-06T10:00:25.590326Z"}, {"uuid": "90fbd3f9-ce2a-4557-b976-f45e6cf1dd1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3msfyiw2hoc2a", "content": "\ud83d\udea8 CSUITE THREAT ADVISORY: CISA confirms active exploitation of CVE-2026-63077 in JetBrains TeamCity. Unauthenticated RCE threatens core build pipelines & supply chain integrity. Get the executive governance, risk management, and compliance brief now: https://thecybermind.co/jvee", "creation_timestamp": "2026-08-06T11:59:13.307199Z"}, {"uuid": "313fb97b-d1a4-4f95-9401-a5b41dca9ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/GithubRedTeam/97448", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a teamcity-CVE-2026-63077-pcap\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BoredHackerBlog\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 14:33:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nteamcity teamcity-CVE-2026-63077 exploitation pcap\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-10T16:00:03.676723Z"}, {"uuid": "e3714524-c69e-4bf7-9276-3200777ccef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-034", "content": "", "creation_timestamp": "2026-08-13T08:45:53.056699Z"}, {"uuid": "c532158b-d58f-4c13-8f16-b97511f47451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/jshannonquest.bsky.social/post/3msqizsgaux22", "content": "CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild http://my.sociabble.com/3RDsc6UgVZ72", "creation_timestamp": "2026-08-10T16:21:37.229589Z"}, {"uuid": "21039b9f-f3e1-401e-9ff3-60129b33dd3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/pphm_HackerNews/2478", "content": "\ud83d\udd34 Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability\n\nThreat actors have started exploiting a recently patched vulnerability in JetBrains TeamCity, the US cybersecurity agency CISA warns.\n\nA continuous integration and continuous delivery (CI/CD) platform, TeamCity provides automated software building and deployment and is a central component of enterprise workflows, collaboration, and development practices.\n\nTracked as CVE-2026-63077 (CVSS score of 9.8), the critical security defect is related to deserialization of untrusted data and allows unauthenticated attackers to achieve remote code execution (RCE) via HTTP/S requests.", "creation_timestamp": "2026-08-22T00:00:10.602017Z"}, {"uuid": "327bd82c-e3ce-42d0-bcd7-68419431940f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/pphm_HackerNews/2383", "content": "\ud83d\udd34 Critical Code Execution Vulnerability Patched in TeamCity \n\nJetBrains this week rolled out patches for a critical-severity vulnerability in TeamCity On-Premises that can be exploited without authentication.\n\nTracked as CVE-2026-63077 (CVSS score of 9.8), the security defect can be exploited via HTTP/S to bypass authentication and achieve remote code execution (RCE).\n\n\u201cAn unauthenticated attacker could exploit the vulnerability via the TeamCity agent polling protocol to bypass authentication checks and execute arbitrary operating system commands with the privileges of the TeamCity server process,\u201d JetBrains explains in its advisory.", "creation_timestamp": "2026-08-22T00:00:10.708421Z"}, {"uuid": "8293987d-2037-4faf-bc58-86b39d94ce89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/12442", "content": "CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild \u2013 thehackernews.com\n\nThu, 06 Aug 2026 14:51:43", "creation_timestamp": "2026-08-06T13:00:03.550178Z"}, {"uuid": "e70c6f00-4f2c-4c69-aaed-98829dd53127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/cyberok_news/248", "content": "\ud83e\udde8 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 RCE \u0432 JetBrains TeamCity \n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-63077 (CVSS 3.1: 9.8) \u0432 JetBrains TeamCity On-Premises \u0431\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 27 \u0438\u044e\u043b\u044f 2026 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 TeamCity \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u043e\u043f\u0440\u043e\u0441\u0430 \u0430\u0433\u0435\u043d\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u00ab\u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435\u00bb \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430. \n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 TeamCity On-Premises \u0434\u043e 2026.1.3 \u0438 \u0434\u043e 2025.11.7 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u041f\u043e\u0434 \u0443\u0434\u0430\u0440\u043e\u043c \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 TeamCity \u0434\u043b\u044f CI/CD, \u0433\u0434\u0435 \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430: \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 downstream-\u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u043e\u0432. \n\n\u2699\ufe0f \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\u041a\u043e\u0440\u0435\u043d\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 XStream, \u043a\u043e\u0442\u043e\u0440\u0443\u044e TeamCity \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 XML-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043e\u0442 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0441\u0431\u043e\u0440\u043a\u0438. \n\n\u041f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 endpoints /app/agents/v1/register \u0438 /app/agents/v1/commands/error TeamCity \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 XML \u043e\u0442 \u00ab\u0430\u0433\u0435\u043d\u0442\u0430\u00bb \u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 XStream. \u0412 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 TeamCity \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442 XStream \u0441 \u0431\u0435\u043b\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u043a\u043b\u0430\u0441\u0441\u043e\u0432, \u043d\u043e \u043d\u0435 \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f XStream \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044e\u0442 \u0448\u0438\u0440\u043e\u043a\u0438\u0435 \u0438\u0435\u0440\u0430\u0440\u0445\u0438\u0438 \u0442\u0438\u043f\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Map \u0438 Throwable. \n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443:\n1. \u0417\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u00ab\u0430\u0433\u0435\u043d\u0442\u0430\u00bb \u0447\u0435\u0440\u0435\u0437 POST \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0439 ID \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 TeamCity-AgentSessionId.\n2. \u041e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 XML-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441  \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u043c ID.\n3. \u0412 XML-\u0442\u0435\u043b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c gadget chain, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JSP-\u0444\u0430\u0439\u043b (.jspws) \u0432 webroot TeamCity. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043b\u0430\u0435\u0442 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a \u044d\u0442\u043e\u043c\u0443 JSP-\u0444\u0430\u0439\u043b\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 TeamCity. \n\n\u0412 \u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 (2026.1.3 / 2025.11.7) TeamCity \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 NoTypePermission.NONE \u043f\u0435\u0440\u0435\u0434 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u043e\u0439 \u0431\u0435\u043b\u043e\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430, \u0447\u0442\u043e \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u0432\u0441\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u043c. \n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u041f\u041e:\n< 2026.1.3 (\u0432\u0435\u0442\u043a\u0430 2026.1.x) \n< 2025.11.7 (\u0432\u0435\u0442\u043a\u0430 2025.11.x).\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e:\nTeamCity 2026.1.3 \u0438 2025.11.7 (\u0440\u0435\u043b\u0438\u0437\u044b \u043e\u0442 27.07.2026). \n\n\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438:\n\ud83d\udd3b \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 (CVSS 3.1: 9.8). \nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H \n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 TeamCity (HTTP/HTTPS). \n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n1. POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /app/agents/v1/register \u0438 /app/agents/v1/commands/error \u0441 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c TeamCity-AgentSessionId \u043e\u0442 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432. \n\n2. \u041e\u0448\u0438\u0431\u043a\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 XStream \u0432 \u043b\u043e\u0433\u0430\u0445 teamcity-server.log \u0441 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435\u043c ForbiddenClassException: jetbrains.buildServer.serverSide.metadata.impl.metadata.HSQLMetadataStorage$SchemaMismatchException. \n\n3. \u041e\u0448\u0438\u0431\u043a\u0438 ConversionException \u0441 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435\u043c freemarker.ext.beans.HashAdapter, TiedMapEntry, HashSet \u0438 LinkedHashMap \u0432 \u043b\u043e\u0433\u0430\u0445 Java. \n\n4. \u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f HSQLDB \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 file input/output error: ../webapps/ROOT/*.jspws already exists. \n\n5. \u041f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 .jspws-\u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 webapps/ROOT/ \u0441 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u044b\u043c (JSP-\u0441\u043a\u0440\u0438\u043f\u0442\u043b\u0435\u0442\u044b \u0441 Runtime.getRuntime().exec()). \n\n6. \u0418\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 TeamCity \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 JSP-\u0444\u0430\u0439\u043b\u0430. \n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 TeamCity On-Premises \u0434\u043e 2026.1.3 \u0438\u043b\u0438 2025.11.7 (\u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435). \n\n2. \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0439\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440 TeamCity \u043e\u0442 \u043d\u0435\u043d\u0430\u0434\u0451\u0436\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439:\n\u2022 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0440\u0442\u0430\u043c HTTP/HTTPS \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0430\u0434\u0440\u0435\u0441\u0430\u043c\u0438 IP;\n\u2022 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0439\u0442\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430\u043c /app/agents/v1/* \u0438\u0437\u0432\u043d\u0435. \n\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043b\u043e\u0433\u0438 teamcity-server.log \u0438 teamcity-javaLogging-*.log \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 XStream \u0438 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0439 .jspws-\u0444\u0430\u0439\u043b\u043e\u0432.\n\n4. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 webapps/ROOT/ \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043d\u0435\u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0445 .jspws-\u0444\u0430\u0439\u043b\u043e\u0432.\n\n5. \u0417\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u0435 TeamCity \u043f\u043e\u0434 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u041e\u0421: \u0431\u0435\u0437 shell-\u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \n\n6. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 PoC \u043e\u0442 Rapid7 \u0434\u043b\u044f \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0447\u0442\u043e \u043f\u0430\u0442\u0447 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e. \n\n7. \u0421\u0441\u044b\u043b\u043a\u0438:\n\u2022 JetBrains Security Advisory CVE-2026-63077\n\u2022 CVE-2026-63077 \u0432 NVD\n\u2022 CISA KEV Catalog", "creation_timestamp": "2026-08-15T08:00:04.074124Z"}, {"uuid": "4452714c-0888-43b1-88e3-e59326104e22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/crawler.baldanders.info/post/3msxdytyatv2c", "content": "\uff1e \u304a\u77e5\u3089\u305b\uff1aCyberNewsFlash\u300cJetBrains TeamCity\uff08\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\uff09\u306b\u304a\u3051\u308b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u8106\u5f31\u6027\uff08CVE-2026-63077\uff09\u306b\u3064\u3044\u3066\u300d\nhttps://www.jpcert.or.jp/newsflash/2026081301.html\n", "creation_timestamp": "2026-08-13T09:40:14.238365Z"}, {"uuid": "e4cbcddb-b9cd-46ef-b25e-8a2a0829677e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mt47fpylp62t", "content": "\u300cTeamCity\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u306b\u6ce8\u610f - \u5bfe\u5fdc\u72b6\u6cc1\u306e\u78ba\u8a8d\u3084\u4fb5\u5bb3\u8abf\u67fb\u3092\n\nJetBrains\u306eCI\u88fd\u54c1\u300cTeamCity\u300d\u306e\u8106\u5f31\u6027\u300cCVE-2026-63077\u300d\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002JPCERT\u30b3\u30fc\u30c7\u30a3\u30cd\u30fc\u30b7\u30e7\u30f3\u30bb\u30f3\u30bf\u30fc\u306f\u5229\u7528\u8005\u306b\u5bfe\u3057\u3066\u3001\u5bfe\u5fdc\u72b6\u6cc1\u306e\u78ba\u8a8d\u3068\u4fb5\u5bb3\u8abf\u67fb\u306e\u5b9f\u65bd\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u307e\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-08-15T08:01:16.443816Z"}, {"uuid": "440e3b57-4f3c-4285-a57f-f5441b177591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-63077.yaml", "content": "", "creation_timestamp": "2026-08-11T00:00:06.441915Z"}, {"uuid": "0427dcae-c4f7-4613-9400-c5d5472a0bb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97448", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a teamcity-CVE-2026-63077-pcap\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BoredHackerBlog\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 14:33:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nteamcity teamcity-CVE-2026-63077 exploitation pcap\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T00:00:07.484644Z"}, {"uuid": "8ff67100-acce-44df-86bf-09668efe463f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3msgpvjk57k2i", "content": "CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the\u00a0Wild\n\nA newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active exploitation in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The\u2026", "creation_timestamp": "2026-08-06T18:57:52.286147Z"}, {"uuid": "acd4e9e7-ae33-4be2-ac20-66a7b5f84c62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3msh2qqtg4h2h", "content": "CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild thehackernews.com/2026/08/cisa...", "creation_timestamp": "2026-08-06T22:12:07.046424Z"}, {"uuid": "10219969-d6d8-4dbc-a168-f56154be6a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63077", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117051134534515617", "content": "\ud83d\udcf0 JetBrains Patches Critical Unauthenticated RCE Flaw in TeamCity\n\ud83d\udea8 CRITICAL ALERT: JetBrains patches CVE-2026-63077, a 9.8 CVSS unauthenticated RCE in TeamCity On-Premises. All versions affected. Exploit allows full server takeover. Upgrade immediately to prevent supply chain attacks! #TeamCity #CI/CD #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/jetbrains-patches-critical-unauthenticated-rce-flaw-cve-2026-63077-in-teamcity/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-06T23:24:57.301785Z"}, {"uuid": "bfb254c0-41f1-4639-852e-6db6369697b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/12442", "content": "CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild \u2013 thehackernews.com\n\nThu, 06 Aug 2026 14:51:43", "creation_timestamp": "2026-08-07T00:08:51.539842Z"}, {"uuid": "3aac6fe9-2557-47b7-8582-59e392df3c36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://t.me/ctinow/254640", "content": "CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild\nhttps://ift.tt/HYNxqlP", "creation_timestamp": "2026-08-07T00:12:57.909607Z"}, {"uuid": "0308a730-bde7-4f4c-af0b-8da591a80614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://t.me/information_security_channel/55692", "content": "Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability\nhttps://www.securityweek.com/hackers-start-exploiting-recent-jetbrains-teamcity-vulnerability/\n\nTracked as CVE-2026-63077, the critical bug can be exploited without authentication for remote code execution.\nThe post Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability (https://www.securityweek.com/hackers-start-exploiting-recent-jetbrains-teamcity-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-07T00:12:57.978846Z"}, {"uuid": "0bf33de5-0545-416f-8b3c-ef4fba5b05f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://t.me/thehackernews/9724", "content": "\ud83d\udea8 On-premise TeamCity is under attack.\n\nCISA says attackers are exploiting CVE-2026-63077 in the wild. The 9.8-rated flaw can let unauthenticated attackers run OS commands, putting stored credentials, build artifacts, and downstream CI/CD pipelines at risk.\n\nWhat is known so far \ud83e\udc16 https://thehackernews.com/2026/08/cisa-flags-teamcity-cve-2026-63077-rce.html", "creation_timestamp": "2026-08-07T00:17:18.346462Z"}, {"uuid": "2059ac0f-69a6-4a5c-8899-562fee266761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mst5qyuvq22p", "content": "1/ \ud83d\udd12 JetBrains TeamCity CVE-2026-63077 scores CVSS 9.8. Unauthenticated attackers skip login, run code. CISA confirms active exploitation. Public PoC exists. Patch now.", "creation_timestamp": "2026-08-11T17:37:54.513258Z"}, {"uuid": "1b434626-4ead-4776-9b1a-c1d2d1ae4cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mst5qyxuhc2p", "content": "1/ \ud83d\udd12 JetBrains TeamCity CVE-2026-63077 scores CVSS 9.8. Unauthenticated attackers skip login, run code. CISA confirms active exploitation. Public PoC exists. Patch now.", "creation_timestamp": "2026-08-11T17:37:56.455186Z"}, {"uuid": "71623565-e08d-4c08-9fc5-94996bf3598c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mst5qyxwfs2p", "content": "1/ \ud83d\udd12 JetBrains TeamCity CVE-2026-63077 scores CVSS 9.8. Unauthenticated attackers skip login, run code. CISA confirms active exploitation. Public PoC exists. Patch now.", "creation_timestamp": "2026-08-11T17:37:57.625347Z"}, {"uuid": "cc23f3f4-1d21-4db5-adc2-270e77784cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mst5qyxqkc2p", "content": "1/ \ud83d\udd12 JetBrains TeamCity CVE-2026-63077 scores CVSS 9.8. Unauthenticated attackers skip login, run code. CISA confirms active exploitation. Public PoC exists. Patch now.", "creation_timestamp": "2026-08-11T17:37:55.002216Z"}, {"uuid": "a8b92a10-5ac6-45c2-bbe1-5a48ff7bb1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mst5qyxti22p", "content": "1/ \ud83d\udd12 JetBrains TeamCity CVE-2026-63077 scores CVSS 9.8. Unauthenticated attackers skip login, run code. CISA confirms active exploitation. Public PoC exists. Patch now.", "creation_timestamp": "2026-08-11T17:37:55.967542Z"}, {"uuid": "86ceac31-a546-410d-9798-7eff9882a556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mst5qyxwft2p", "content": "1/ \ud83d\udd12 JetBrains TeamCity CVE-2026-63077 scores CVSS 9.8. Unauthenticated attackers skip login, run code. CISA confirms active exploitation. Public PoC exists. Patch now.", "creation_timestamp": "2026-08-11T17:37:58.098163Z"}, {"uuid": "b0278c28-1c8e-4cbe-9674-1e750fdb4ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mst5qyxsis2p", "content": "1/ \ud83d\udd12 JetBrains TeamCity CVE-2026-63077 scores CVSS 9.8. Unauthenticated attackers skip login, run code. CISA confirms active exploitation. Public PoC exists. Patch now.", "creation_timestamp": "2026-08-11T17:37:55.487019Z"}, {"uuid": "c4dba00a-5576-48e5-977c-9b9f911174d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mst5qyxvgk2p", "content": "1/ \ud83d\udd12 JetBrains TeamCity CVE-2026-63077 scores CVSS 9.8. Unauthenticated attackers skip login, run code. CISA confirms active exploitation. Public PoC exists. Patch now.", "creation_timestamp": "2026-08-11T17:37:57.164045Z"}, {"uuid": "831ba7ff-1587-4b15-9e36-5b74e50c4cb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mst5qyxxf32p", "content": "1/ \ud83d\udd12 JetBrains TeamCity CVE-2026-63077 scores CVSS 9.8. Unauthenticated attackers skip login, run code. CISA confirms active exploitation. Public PoC exists. Patch now.", "creation_timestamp": "2026-08-11T17:37:58.533019Z"}, {"uuid": "c906f850-a529-4aec-801e-02dfbf4178b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63077", "type": "seen", "source": "https://bsky.app/profile/endoflife.ai/post/3msxz5y6o7e25", "content": "\ud83d\udcd6 New from endoflife.ai:\n\nThe TeamCity RCE Under Active Exploitation Will Never Be Patched on Nine Version Lines \u2014 CVE-2026-63077\n\nhttps://endoflife.ai/article-teamcity-cve-2026-63077", "creation_timestamp": "2026-08-13T15:58:55.010883Z"}, {"uuid": "1264fd0b-9630-4d5e-9605-f024b57235c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/quasagroup.bsky.social/post/3mtdryii4wk2r", "content": "TeamCity ya se explota en ataques: el parche no admite m\u00e1s espera\nquasa.io/es/media/tea...\nFuentes: Quasa Media, La actualizaci\u00f3n de seguridad de JetBrains, cat\u00e1logo de vulnerabilidades explotadas, El registro de CVE-2026-63077 en NVD / Escritor: Slava Vasipenok", "creation_timestamp": "2026-08-18T08:22:33.062710Z"}, {"uuid": "baf7feac-7334-45b1-b7d9-ed191b88fb66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://thehackernews.com/2026/08/cisa-flags-teamcity-cve-2026-63077-rce.html", "content": "A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active exploitation in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA).\n\nThe vulnerability in question is CVE-2026-63077 (CVSS score: 9.8), a case of deserialization of untrusted data that could allow an unauthenticated attacker with access to a TeamCity server", "creation_timestamp": "2026-08-07T01:00:36.058024Z"}, {"uuid": "4b5947af-d6c5-45f1-ae5a-ecb9106493fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mshfv2mg6s2a", "content": "CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild\n\nA newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active exploitation in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agen\u2026\n#hackernews #news", "creation_timestamp": "2026-08-07T01:31:19.016146Z"}, {"uuid": "9ca02897-af46-497f-b7ca-d415684598a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mste2cunjc2g", "content": "CISA warns of active exploitation of CVE-2026-63077 in on-premise JetBrains TeamCity. This high-severity flaw (CVSS 9.8) risks unauthenticated data deserialization. Update now!", "creation_timestamp": "2026-08-11T19:30:24.512602Z"}, {"uuid": "7bd9be5c-86b3-4a7f-89bf-fc895c6eacd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mshyuwiyy626", "content": "Hackers are actively abusing CVE-2026-63077 in JetBrains TeamCity to execute unauthenticated remote code. Because expecting build servers to stay secure is far too optimistic.\n\n#TeamCityChaos #PatchItAlready", "creation_timestamp": "2026-08-07T07:11:17.187236Z"}, {"uuid": "c1e81cd1-505c-4f6d-8171-a674314e0f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/smartdeels.bsky.social/post/3msi2thpdau2j", "content": "Stay ahead of cyber threats! Learn how the latest ASUS laptops can protect your development projects amidst the active exploitation of TeamCity's CVE-2026-63077 flaw #CyberSecurity #TeamCity", "creation_timestamp": "2026-08-07T07:46:15.985786Z"}, {"uuid": "f2dbdff3-e04c-4f42-90fe-458447ee0e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://t.me/cyberok_news/248", "content": "\ud83e\udde8 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 RCE \u0432 JetBrains TeamCity \n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-63077 (CVSS 3.1: 9.8) \u0432 JetBrains TeamCity On-Premises \u0431\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 27 \u0438\u044e\u043b\u044f 2026 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 TeamCity \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u043e\u043f\u0440\u043e\u0441\u0430 \u0430\u0433\u0435\u043d\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u00ab\u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435\u00bb \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430. \n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 TeamCity On-Premises \u0434\u043e 2026.1.3 \u0438 \u0434\u043e 2025.11.7 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u041f\u043e\u0434 \u0443\u0434\u0430\u0440\u043e\u043c \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 TeamCity \u0434\u043b\u044f CI/CD, \u0433\u0434\u0435 \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430: \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 downstream-\u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u043e\u0432. \n\n\u2699\ufe0f \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\u041a\u043e\u0440\u0435\u043d\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 XStream, \u043a\u043e\u0442\u043e\u0440\u0443\u044e TeamCity \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 XML-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043e\u0442 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0441\u0431\u043e\u0440\u043a\u0438. \n\n\u041f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 endpoints /app/agents/v1/register \u0438 /app/agents/v1/commands/error TeamCity \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 XML \u043e\u0442 \u00ab\u0430\u0433\u0435\u043d\u0442\u0430\u00bb \u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 XStream. \u0412 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 TeamCity \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442 XStream \u0441 \u0431\u0435\u043b\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u043a\u043b\u0430\u0441\u0441\u043e\u0432, \u043d\u043e \u043d\u0435 \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f XStream \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044e\u0442 \u0448\u0438\u0440\u043e\u043a\u0438\u0435 \u0438\u0435\u0440\u0430\u0440\u0445\u0438\u0438 \u0442\u0438\u043f\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Map \u0438 Throwable. \n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443:\n1. \u0417\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u00ab\u0430\u0433\u0435\u043d\u0442\u0430\u00bb \u0447\u0435\u0440\u0435\u0437 POST \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0439 ID \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 TeamCity-AgentSessionId.\n2. \u041e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 XML-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441  \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u043c ID.\n3. \u0412 XML-\u0442\u0435\u043b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c gadget chain, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JSP-\u0444\u0430\u0439\u043b (.jspws) \u0432 webroot TeamCity. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043b\u0430\u0435\u0442 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a \u044d\u0442\u043e\u043c\u0443 JSP-\u0444\u0430\u0439\u043b\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 TeamCity. \n\n\u0412 \u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 (2026.1.3 / 2025.11.7) TeamCity \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 NoTypePermission.NONE \u043f\u0435\u0440\u0435\u0434 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u043e\u0439 \u0431\u0435\u043b\u043e\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430, \u0447\u0442\u043e \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u0432\u0441\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u043c. \n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u041f\u041e:\n< 2026.1.3 (\u0432\u0435\u0442\u043a\u0430 2026.1.x) \n< 2025.11.7 (\u0432\u0435\u0442\u043a\u0430 2025.11.x).\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e:\nTeamCity 2026.1.3 \u0438 2025.11.7 (\u0440\u0435\u043b\u0438\u0437\u044b \u043e\u0442 27.07.2026). \n\n\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438:\n\ud83d\udd3b \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 (CVSS 3.1: 9.8). \nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H \n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 TeamCity (HTTP/HTTPS). \n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n1. POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /app/agents/v1/register \u0438 /app/agents/v1/commands/error \u0441 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c TeamCity-AgentSessionId \u043e\u0442 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432. \n\n2. \u041e\u0448\u0438\u0431\u043a\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 XStream \u0432 \u043b\u043e\u0433\u0430\u0445 teamcity-server.log \u0441 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435\u043c ForbiddenClassException: jetbrains.buildServer.serverSide.metadata.impl.metadata.HSQLMetadataStorage$SchemaMismatchException. \n\n3. \u041e\u0448\u0438\u0431\u043a\u0438 ConversionException \u0441 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435\u043c freemarker.ext.beans.HashAdapter, TiedMapEntry, HashSet \u0438 LinkedHashMap \u0432 \u043b\u043e\u0433\u0430\u0445 Java. \n\n4. \u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f HSQLDB \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 file input/output error: ../webapps/ROOT/*.jspws already exists. \n\n5. \u041f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 .jspws-\u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 webapps/ROOT/ \u0441 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u044b\u043c (JSP-\u0441\u043a\u0440\u0438\u043f\u0442\u043b\u0435\u0442\u044b \u0441 Runtime.getRuntime().exec()). \n\n6. \u0418\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 TeamCity \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 JSP-\u0444\u0430\u0439\u043b\u0430. \n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 TeamCity On-Premises \u0434\u043e 2026.1.3 \u0438\u043b\u0438 2025.11.7 (\u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435). \n\n2. \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0439\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440 TeamCity \u043e\u0442 \u043d\u0435\u043d\u0430\u0434\u0451\u0436\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439:\n\u2022 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0440\u0442\u0430\u043c HTTP/HTTPS \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0430\u0434\u0440\u0435\u0441\u0430\u043c\u0438 IP;\n\u2022 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0439\u0442\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430\u043c /app/agents/v1/* \u0438\u0437\u0432\u043d\u0435. \n\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043b\u043e\u0433\u0438 teamcity-server.log \u0438 teamcity-javaLogging-*.log \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 XStream \u0438 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0439 .jspws-\u0444\u0430\u0439\u043b\u043e\u0432.\n\n4. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 webapps/ROOT/ \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043d\u0435\u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0445 .jspws-\u0444\u0430\u0439\u043b\u043e\u0432.\n\n5. \u0417\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u0435 TeamCity \u043f\u043e\u0434 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u041e\u0421: \u0431\u0435\u0437 shell-\u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \n\n6. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 PoC \u043e\u0442 Rapid7 \u0434\u043b\u044f \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0447\u0442\u043e \u043f\u0430\u0442\u0447 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e. \n\n7. \u0421\u0441\u044b\u043b\u043a\u0438:\n\u2022 JetBrains Security Advisory CVE-2026-63077\n\u2022 CVE-2026-63077 \u0432 NVD\n\u2022 CISA KEV Catalog", "creation_timestamp": "2026-08-16T00:00:48.276700Z"}, {"uuid": "ef6539e6-73de-4d15-be17-d8d85a721ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mstifyxxsm27", "content": "\u041e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c TeamCity CVE-2026-63077: \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 CI/CD-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438\n\n\n\nhttps://kripta.biz/posts/15E971EF-5872-4972-AC5E-E00B90BC02A3", "creation_timestamp": "2026-08-11T20:48:31.651844Z"}, {"uuid": "dac0c0d2-1820-43f0-a0e8-db3a95a30549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "Telegram/isYPSVfmLV-yXhFUvFv7aAeBp2-cYNaaRPY4UoKoJUaHcQ", "content": "", "creation_timestamp": "2026-08-07T11:04:26.532137Z"}, {"uuid": "73c4842e-3bb8-4017-a611-5a4f6ebd97a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3msinw6usty2y", "content": "CISA added CVE-2026-63077, a critical unauthenticated remote-code-execution flaw in JetBrains TeamCity (CVSS 9.8), to its Known Exploited Vulnerabilities catalog on August 5, 2026, citing active exploitation. Federal agencies must patch by August 8. Sources: CISA, The Hacker News, Security", "creation_timestamp": "2026-08-07T13:27:53.823667Z"}, {"uuid": "f0fdb425-8636-4ac2-9ca6-79fd6fa4a4b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/bdufstecru/3368", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (CI/CD) JetBrains TeamCity \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\n\nBDU:2026-11140\nCVE-2026-63077\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.jetbrains.com/privacy-security/issues-fixed/", "creation_timestamp": "2026-08-07T14:07:37.441382Z"}, {"uuid": "573effb2-488e-462e-997e-1e52b16ee3fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3msivwrpvc22r", "content": "We have published our @rapid7.com analysis of CVE-2026-63077, an unauth RCE in JetBrains TeamCity that was disclosed last week and already added to KEV as being exploited in the wild. This one has a gnarly gadget chain and a polyglot SQL/JSP payload. Full analysis/PoC: www.rapid7.com/blog/post/ra...", "creation_timestamp": "2026-08-07T15:51:22.749285Z"}, {"uuid": "32c6c0dc-c5ed-4127-9348-6d7a53e9200f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3msivxv6gxc2r", "content": "PoC for CVE-2026-63077 here: github.com/sfewer-r7/CV...", "creation_timestamp": "2026-08-07T15:51:53.875822Z"}, {"uuid": "a534a8a4-849d-4948-8b0b-c4c5c416042e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3msix3wqhy22u", "content": "CISA has warned of a critical vulnerability in JetBrains TeamCity, tracked as CVE-2026-63077, allowing unauthenticated remote code execution on vulnerable On-Premises servers. Added to CISA's Known Exploited Vulnerabilities catalog on August 5, a remediation deadline was set for August 8.", "creation_timestamp": "2026-08-07T16:12:03.468265Z"}, {"uuid": "6967c21e-2397-4247-8217-a6da1ae2e7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "96c16751-1b73-43f8-8ab4-831c0a20223d", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "https://github.com/sfewer-r7/CVE-2026-63077", "content": "", "creation_timestamp": "2026-08-07T16:13:58.965355Z"}, {"uuid": "91c695c8-b307-4c58-a438-78db6c122f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "96c16751-1b73-43f8-8ab4-831c0a20223d", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077/", "content": "", "creation_timestamp": "2026-08-07T16:14:10.830515Z"}, {"uuid": "169714ea-ff80-48c3-823a-80eb7303c22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msj4bvsq4d2k", "content": "3/ \u26a0\ufe0f CISA flagged JetBrains TeamCity CVE-2026-63077 (CVSS 9.8) as actively exploited. Unauthenticated RCE. ~4,500 servers exposed. Patch deadline is TOMORROW, Aug 8. Update to 2025.11.7 or 2026.1.3 now.", "creation_timestamp": "2026-08-07T17:44:53.481649Z"}, {"uuid": "ae6c3016-085d-45b7-9b34-a30d14cd1fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msj4bvswx32k", "content": "3/ \u26a0\ufe0f CISA flagged JetBrains TeamCity CVE-2026-63077 (CVSS 9.8) as actively exploited. Unauthenticated RCE. ~4,500 servers exposed. Patch deadline is TOMORROW, Aug 8. Update to 2025.11.7 or 2026.1.3 now.", "creation_timestamp": "2026-08-07T17:44:54.016621Z"}, {"uuid": "1b38ec8a-1e3e-4015-a493-8f241250eff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msj4bvsxwd2k", "content": "3/ \u26a0\ufe0f CISA flagged JetBrains TeamCity CVE-2026-63077 (CVSS 9.8) as actively exploited. Unauthenticated RCE. ~4,500 servers exposed. Patch deadline is TOMORROW, Aug 8. Update to 2025.11.7 or 2026.1.3 now.", "creation_timestamp": "2026-08-07T17:44:54.489866Z"}, {"uuid": "27898fca-d79b-4499-9029-dc6feb742cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msj4bvsyvl2k", "content": "3/ \u26a0\ufe0f CISA flagged JetBrains TeamCity CVE-2026-63077 (CVSS 9.8) as actively exploited. Unauthenticated RCE. ~4,500 servers exposed. Patch deadline is TOMORROW, Aug 8. Update to 2025.11.7 or 2026.1.3 now.", "creation_timestamp": "2026-08-07T17:44:54.962781Z"}, {"uuid": "5d5accb1-34e4-4f49-8e01-964e3f5090c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/23634", "content": "CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild \u2013 thehackernews.com\n\nThu, 06 Aug 2026 14:51:43", "creation_timestamp": "2026-08-23T00:00:44.391436Z"}, {"uuid": "7c6216e2-4c4f-4966-ac69-062d70cfcd7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/pphm_HackerNews/2383", "content": "\ud83d\udd34 Critical Code Execution Vulnerability Patched in TeamCity \n\nJetBrains this week rolled out patches for a critical-severity vulnerability in TeamCity On-Premises that can be exploited without authentication.\n\nTracked as CVE-2026-63077 (CVSS score of 9.8), the security defect can be exploited via HTTP/S to bypass authentication and achieve remote code execution (RCE).\n\n\u201cAn unauthenticated attacker could exploit the vulnerability via the TeamCity agent polling protocol to bypass authentication checks and execute arbitrary operating system commands with the privileges of the TeamCity server process,\u201d JetBrains explains in its advisory.", "creation_timestamp": "2026-08-23T00:00:46.028861Z"}, {"uuid": "ef227da0-c920-493b-a057-57ea44d414f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2478", "content": "\ud83d\udd34 Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability\n\nThreat actors have started exploiting a recently patched vulnerability in JetBrains TeamCity, the US cybersecurity agency CISA warns.\n\nA continuous integration and continuous delivery (CI/CD) platform, TeamCity provides automated software building and deployment and is a central component of enterprise workflows, collaboration, and development practices.\n\nTracked as CVE-2026-63077 (CVSS score of 9.8), the critical security defect is related to deserialization of untrusted data and allows unauthenticated attackers to achieve remote code execution (RCE) via HTTP/S requests.", "creation_timestamp": "2026-08-23T00:00:46.696763Z"}, {"uuid": "f605c418-ac40-437a-b85f-cc80a788b251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtxhkoxwbk2y", "content": "\u300cTeamCity\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u4fee\u6b63\n\n\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u30d3\u30eb\u30c9\u3084\u30c6\u30b9\u30c8\u3001\u81ea\u52d5\u914d\u5e03\u306a\u3069\u306e\u6a5f\u80fd\u3092\u63d0\u4f9b\u3059\u308bJetBrains\u306eCI/CD\u30b5\u30fc\u30d0\u300cTeamCity\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\n\u540c\u88fd\u54c1\u306e\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\u306b\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u4efb\u610f\u306eOS\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u8106\u5f31\u6027\u300cCVE-2026-63077\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u30022026\u5e747\u670810\u65e5\u306b\u975e\u516c\u958b\u306e\u3082\u3068\u5831\u544a\u3092\u53d7\u3051\u305f\u3068\u3044\u3046\u3002\n\n\u300cTeamCity\u300d\u306e\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u30dd\u30fc\u30ea\u30f3\u30b0\u30d7\u30ed\u30c8\u30b3\u30eb\u3092\u4ecb\u3057\u3066\u8a8d\u8a3c\u30c1\u30a7\u30c3\u30af\u3092\u56de\u907f\u3057\u3001HTTP\u307e\u305f\u306fHTTPS\u7d4c\u7531\u3067\u300cTeamCity Server\u300d\u3078\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u5834\u5408\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u30b3...", "creation_timestamp": "2026-08-26T04:09:05.612438Z"}, {"uuid": "ce2fd336-e0e1-4306-85fb-1b18eba08479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnidphmxq2j", "content": "CVE-2026-63077 - teamcity\nBefore updating to TeamCity 2026.1.3 or 2025.11.7, remote attackers could execute code on your server without needing a password. This is a serious risk because it allows\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#teamcity #jetbrains #CVE #infosec", "creation_timestamp": "2026-07-27T18:06:04.494253Z"}, {"uuid": "da1e252d-f814-4d0c-b4ba-fa0821221678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/thehackernews/9631", "content": "\ud83d\udea8 A critical TeamCity flaw could let attackers run OS commands without logging in.\n\nCVE-2026-63077 affects all on-premises versions and bypasses authentication through the agent polling protocol. JetBrains has released fixes and reports no known exploitation.\n\nFull details - https://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html", "creation_timestamp": "2026-07-28T09:00:06.972421Z"}, {"uuid": "896b2822-a8fc-4660-9e2a-4f4587d3bc9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtss4b4zor2k", "content": "CVE-2026-63077 is a TeamCity unauthenticated RCE, now exploited in the wild with a public PoC. Australia's ACSC confirms active attacks.\n\n#TeamCity #CVE202663077 #RCE #CyberSecurity #JetBrains #CISAKEV", "creation_timestamp": "2026-08-24T07:34:34.116780Z"}, {"uuid": "1e56b16b-52b4-44d6-a9fe-f6de34658e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html", "content": "JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could result in arbitrary code execution.\n\nThe vulnerability, assigned CVE-2026-63077 (CVSS score: 9.8), affects all TeamCity On-Premises versions. It has been addressed in versions 2025.11.7 and 2026.1.3. TeamCity Cloud instances have already", "creation_timestamp": "2026-07-28T10:00:53.452239Z"}, {"uuid": "5071b43c-a931-43bf-8152-f51a469ac5b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrpa647vud2v", "content": "Critical TeamCity flaw (CVE-2026-63077) allows unauthenticated OS command execution. Update now. #TeamCity #JetBrains #CVE202663077 #SecurityUpdate #DevOps #CyberSecurity thedailytechfeed.com/critical-tea...", "creation_timestamp": "2026-07-28T10:45:06.861239Z"}, {"uuid": "dd9e8534-00ef-41eb-a51f-786d0c9370e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrpai57yr52j", "content": "\ud83e\udd16 CVE-2026-63077 (CVSS 9.8): Critical unauthenticated RCE in JetBrains TeamCity. No auth needed \u2014 OS command execution. Patch all on-prem versions immediately.\nhttps://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html", "creation_timestamp": "2026-07-28T10:50:43.299324Z"}, {"uuid": "6c3598ad-ee5f-4481-ac29-621e9534e80c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mrpb3eiidg2y", "content": "TeamCity \u306b\u8a8d\u8a3c\u306a\u3057\u3067OS \u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u53ef\u80fd\u306a\u91cd\u5927\u8106\u5f31\u6027 CVE-2026-63077\n\nCVE-2026-63077 \u306b\u3088\u308a\u3001\u8a8d\u8a3c\u306a\u3057\u306e\u653b\u6483\u8005\u304c TeamCity \u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c1\u30a7\u30c3\u30af\u3092\u56de\u907f\u3057\u3066 OS \u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u53ef\u80fd\u3002JetBrains \u304c\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-07-28T11:01:28.943974Z"}, {"uuid": "b8456fb9-19ea-46bc-81c4-27d988f1cf9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mrpbk2ndek2k", "content": "JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/07/28/t...\n\n#cybersecurity #cybersecuritynews #continuousintegration #enterprise #softwaredevelopment #vulnerability @jetbrains.com", "creation_timestamp": "2026-07-28T11:09:44.888123Z"}, {"uuid": "a87c8f40-58a9-4b90-a942-d36b34845003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mrpbwirxlo2h", "content": "JetBrains\u3001TeamCity On-Premises\u306e\u8a8d\u8a3c\u4e0d\u8981\u306a\u91cd\u5927\u306aRCE\u8106\u5f31\u6027(CVE-2026-63077)\u3092\u4fee\u6b63\n\nJetBrains\u306fTeamCity On-Premises\u306b\u5f71\u97ff\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027(CVE-2026-63077)\u3092\u4fee\u6b63\u3057\u3001\u30bb\u30eb\u30d5\u30db\u30b9\u30c8\u578b\u30b5\u30fc\u30d0\u30fc\u306e\u7ba1\u7406\u8005\u306b\u5bfe\u3057\u3066\u53ef\u80fd\u306a\u9650\u308a\u901f\u3084\u304b\u306b\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u3059\u308b\u3088\u3046\u547c\u3073\u304b\u3051\u3066\u3044\u307e\u3059\u3002 \u300c\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u304c\u3067\u304d\u306a\u3044\u74b0\u5883\u5411\u3051\u306b\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u30d7\u30e9\u30b0\u30a4\u30f3\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e...", "creation_timestamp": "2026-07-28T11:16:38.766491Z"}, {"uuid": "9b9da73f-b69b-423b-a84c-e11ff91d4f06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrpbyffirn2j", "content": "Administrators running self-hosted TeamCity On-Premises builds get the joy of dealing with CVE-2026-63077, where unauthenticated attackers exploit agent polling protocols to execute arbitrary commands at will. Rather than enjoying a peaceful brew, weary sysadmins must now rush to...\n\nRead full story", "creation_timestamp": "2026-07-28T11:17:42.050001Z"}, {"uuid": "56d1afe4-c624-42b1-bd29-13db449e2b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrpgftcq5423", "content": "CVE-2026-63077: JetBrains' Patch Fails to Address Systemic Response Gaps #CVE2026 #JetBrains #CyberSecurity", "creation_timestamp": "2026-07-28T12:36:49.737680Z"}, {"uuid": "4664fe43-8c0c-4ef2-a576-2dd287e1ab3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrpgfwhevo25", "content": "CVE-2026-63077: JetBrains' TeamCity Patch Does Not Address Prior Exploitation Risks #Cybersecurity #Vulnerability #CVE2026", "creation_timestamp": "2026-07-28T12:36:51.622217Z"}, {"uuid": "ff5e2141-a462-45e7-8a28-7597f8c0bcca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrpgki3oh32o", "content": "CVE-2026-63077: JetBrains' TeamCity Flaw Raises More Questions Than Answers #CVE2026 #TeamCity #JetBrains", "creation_timestamp": "2026-07-28T12:39:24.697681Z"}, {"uuid": "63876764-1a5d-4be7-95e3-e0ae6b5680a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrpgklpjbz2j", "content": "CVE-2026-63077: Urgency of JetBrains TeamCity Patch or Administrative Apathy? #CVE2026 #JetBrains #TeamCity", "creation_timestamp": "2026-07-28T12:39:27.648415Z"}, {"uuid": "f7bd8cb2-449b-4fa9-9268-1207788afe80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mrperkahk22z", "content": "JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)\n\nwww.helpnetsecurity.com/2026/07/28/t...\n\n#Kyberturvallisuus #Kyber #Tilannekuva", "creation_timestamp": "2026-07-28T12:07:35.332486Z"}, {"uuid": "4feec11a-dd6c-4d01-b1ad-e799017cfbd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrpfsifrsp22", "content": "\u26a0\ufe0f PATCH NOW\n\nJetBrains disclosed a critical TeamCity flaw (CVE-2026-63077, CVSS 9.8): an unauthenticated attacker who reaches the server can run commands and take it over.\n\nAffects every On-Premises version; no exploit seen yet.\n\nFix: update to 2025.11.7 / 2026.1.3, or put it behind a VPN.", "creation_timestamp": "2026-07-28T12:25:59.119701Z"}, {"uuid": "0fd18149-1f31-4d82-9cc4-f16105c47099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrpgfmsure23", "content": "CVE-2026-63077: JetBrains' TeamCity Flaw Opens Door for Server Takeover #CVE2026 #JetBrains #TeamCity", "creation_timestamp": "2026-07-28T12:36:41.933751Z"}, {"uuid": "40abce9d-780c-4024-bed4-b33850fee3ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrpgfqdkwt2o", "content": "CVE-2026-63077: JetBrains TeamCity Flaw Exposes Servers to Remote Takeover #CVE202663077 #JetBrains #TeamCity", "creation_timestamp": "2026-07-28T12:36:48.346701Z"}, {"uuid": "3a279834-ecda-4fbb-a712-7f0bdcffa195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63077", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mrplzji5jl2e", "content": "Critical TeamCity Flaw Allows Unauthenticated OS Command Execution \u2014 Patch Now\n\nhttps://blindthoughts.com/teamcity-cve-2026-63077-unauthenticated-rce\n\n#vulnerability #cicd #remotecodeexecution #patchnow #supplychainsecurity", "creation_timestamp": "2026-07-28T14:17:17.846911Z"}, {"uuid": "45e6f2ca-aa80-47eb-b806-73d75934f740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://threatintel.cc/2026/07/28/critical-teamcity-flaw-lets-unauthenticated.html", "content": "Critical TeamCity Flaw Lets Unauthenticated Attackers Execute System Commands\n\nA critical vulnerability (CVE-2026-63077) in TeamCity On-Premises allows unauthenticated attackers to execute arbitrary system commands, posing a major risk to CI/CD infrastructure. JetBrains has released patches in versions 2025.11.7 and 2026.1.3, urging administrators to update immediately to prevent potential security compromises.", "creation_timestamp": "2026-07-28T16:00:46.588081Z"}, {"uuid": "8629b75b-a3a7-443c-a5f6-0fcb4a629be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrpyrpfxao2r", "content": "JetBrains releases urgent updates for TeamCity On-Premises to fix critical vulnerability CVE-2026-63077. #JetBrains #TeamCity #CVE202663077 #SecurityUpdate #CyberSecurity #Vulnerability thedailytechfeed.com/jetbrains-ur...", "creation_timestamp": "2026-07-28T18:05:34.042765Z"}, {"uuid": "d8ac7405-a41f-40da-b6f3-8f019acc744c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mrpz7duvak2m", "content": "JetBrains has identified a critical vulnerability (CVE-2026-63077, CVSS 9.8) in all on-premise versions of TeamCity that allows unauthenticated attackers to execute arbitrary OS commands. This flaw can lead to exposure of sensitive data and configurations.", "creation_timestamp": "2026-07-28T18:13:11.866747Z"}, {"uuid": "1cf4fcbf-1cf5-48f4-a138-e166d8e61861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mrq5dhrfpd2g", "content": "2/ \u26a0\ufe0f JetBrains TeamCity has a CVSS 9.8 flaw (CVE-2026-63077). Unauthenticated attackers can skip login and run commands on your build server. Update to 2026.1.3 or 2025.11.7 now.", "creation_timestamp": "2026-07-28T19:27:11.542026Z"}, {"uuid": "9225b725-3ba0-43c0-a787-bfb05057f28e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mrq5dhod322g", "content": "2/ \u26a0\ufe0f JetBrains TeamCity has a CVSS 9.8 flaw (CVE-2026-63077). Unauthenticated attackers can skip login and run commands on your build server. Update to 2026.1.3 or 2025.11.7 now.", "creation_timestamp": "2026-07-28T19:27:06.465719Z"}, {"uuid": "4ebd65e4-15f7-494b-b10c-6d73b91657b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mrq5dhrdqs2g", "content": "2/ \u26a0\ufe0f JetBrains TeamCity has a CVSS 9.8 flaw (CVE-2026-63077). Unauthenticated attackers can skip login and run commands on your build server. Update to 2026.1.3 or 2025.11.7 now.", "creation_timestamp": "2026-07-28T19:27:06.932400Z"}, {"uuid": "e19778b4-2531-4569-adbc-0a291d742fab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mrq5dhrfpc2g", "content": "2/ \u26a0\ufe0f JetBrains TeamCity has a CVSS 9.8 flaw (CVE-2026-63077). Unauthenticated attackers can skip login and run commands on your build server. Update to 2026.1.3 or 2025.11.7 now.", "creation_timestamp": "2026-07-28T19:27:07.406403Z"}, {"uuid": "025c9633-7fb4-4ee5-9d9f-f3cc78fb1be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mrq5dhrgol2g", "content": "2/ \u26a0\ufe0f JetBrains TeamCity has a CVSS 9.8 flaw (CVE-2026-63077). Unauthenticated attackers can skip login and run commands on your build server. Update to 2026.1.3 or 2025.11.7 now.", "creation_timestamp": "2026-07-28T19:27:11.999100Z"}, {"uuid": "bcd737da-631d-464f-b1b6-eec31ce4401b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mrq5dhrhnt2g", "content": "2/ \u26a0\ufe0f JetBrains TeamCity has a CVSS 9.8 flaw (CVE-2026-63077). Unauthenticated attackers can skip login and run commands on your build server. Update to 2026.1.3 or 2025.11.7 now.", "creation_timestamp": "2026-07-28T19:27:12.446586Z"}, {"uuid": "9ac7f0f9-1455-4bed-aae1-c8991891fd39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mrq5dhrin32g", "content": "2/ \u26a0\ufe0f JetBrains TeamCity has a CVSS 9.8 flaw (CVE-2026-63077). Unauthenticated attackers can skip login and run commands on your build server. Update to 2026.1.3 or 2025.11.7 now.", "creation_timestamp": "2026-07-28T19:27:12.874497Z"}, {"uuid": "46f603e9-4721-4caf-881d-4a56945bce27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mrq5dhrjmd2g", "content": "2/ \u26a0\ufe0f JetBrains TeamCity has a CVSS 9.8 flaw (CVE-2026-63077). Unauthenticated attackers can skip login and run commands on your build server. Update to 2026.1.3 or 2025.11.7 now.", "creation_timestamp": "2026-07-28T19:27:13.310122Z"}, {"uuid": "84ee140a-c5d9-41a0-9bf2-fb53125d5dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrqefc2lh72g", "content": "CVE-2026-63077: JetBrains TeamCity RCE", "creation_timestamp": "2026-07-28T21:33:22.228494Z"}, {"uuid": "65c71251-d7ad-4eb5-9091-dbf280840f0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/thehackernews/9631", "content": "\ud83d\udea8 A critical TeamCity flaw could let attackers run OS commands without logging in.\n\nCVE-2026-63077 affects all on-premises versions and bypasses authentication through the agent polling protocol. JetBrains has released fixes and reports no known exploitation.\n\nFull details - https://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html", "creation_timestamp": "2026-07-29T00:00:41.040692Z"}, {"uuid": "1fbfaed3-7f21-4e76-9a6c-f154384fc2e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html", "content": "JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could result in arbitrary code execution.\n\nThe vulnerability, assigned CVE-2026-63077 (CVSS score: 9.8), affects all TeamCity On-Premises versions. It has been addressed in versions 2025.11.7 and 2026.1.3. TeamCity Cloud instances have already", "creation_timestamp": "2026-07-29T01:00:44.805871Z"}, {"uuid": "4a84907a-98cf-4bc6-b1de-a9429c43c7b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://threatintel.cc/2026/07/28/critical-teamcity-flaw-lets-unauthenticated.html", "content": "Critical TeamCity Flaw Lets Unauthenticated Attackers Execute System Commands\n\nA critical vulnerability (CVE-2026-63077) in TeamCity On-Premises allows unauthenticated attackers to execute arbitrary system commands, posing a major risk to CI/CD infrastructure. JetBrains has released patches in versions 2025.11.7 and 2026.1.3, urging administrators to update immediately to prevent potential security compromises.", "creation_timestamp": "2026-07-29T01:00:45.346072Z"}, {"uuid": "49eb4de6-eb12-456b-9163-aa44f5a436c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrquvpgqkk2a", "content": "JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)\n\nJetBrains has fixed a critical vulnerability (CVE-2026-63077) affecting TeamCity On-Premises and is urging admins to upgrade self-hosted servers as soon as possible. \u201cFor those who are unable to\u2026\n#hackernews #news", "creation_timestamp": "2026-07-29T02:28:53.493874Z"}, {"uuid": "56a5be24-56df-457a-8209-d68751e218d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrqw2r62422a", "content": "JetBrains Patches Critical TeamCity Flaw Allowing Server Takeover\n\nJetBrains patched a critical TeamCity flaw (CVE-2026-63077) enabling unauthenticated code execution on affected on-premise servers. JetBrains has released security updates for TeamCity On-Premises after discovering\u2026\n#hackernews #news", "creation_timestamp": "2026-07-29T02:49:49.602150Z"}, {"uuid": "582b00e1-3260-4261-a991-e564c0547c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mrr2cmiogd2l", "content": "JetBrains\u793e\u304cTeamCity\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\u306b\u304a\u3051\u308b\u8a8d\u8a3c\u4e0d\u8981\u306e\u91cd\u5927\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u306e\u8106\u5f31\u6027\uff08CVE-2026-63077\uff09\u3092\u4fee\u6b63 \n\nJetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)  #HelpNetSecurity (Jul 28)\n\nwww.helpnetsecurity.com/2026/07/28/t...", "creation_timestamp": "2026-07-29T04:05:39.164328Z"}, {"uuid": "6947dacb-37db-4336-b51c-01f6d701b276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrr4ulrqc724", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50522: 32 interactions\nCVE-2026-63077: 21 interactions\nCVE-2026-54121: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-63077: 21 interactions\nCVE-2026-54121: 12 interactions\nCVE-2026-64531: 11 interactions\n", "creation_timestamp": "2026-07-29T04:51:25.425629Z"}, {"uuid": "6ed80f73-cc6d-4aa6-b685-fcbcc97467c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "Telegram/gTfAuYBR7n10PAuOXXWlNdRE6KFeE30YWu4DIhMak_L1NA", "content": "", "creation_timestamp": "2026-07-29T10:00:08.063158Z"}, {"uuid": "41d240fd-e017-4f67-80c2-ab1e5756c198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mrscac6oqm2j", "content": "\ud83d\udce2 Vuln\u00e9rabilit\u00e9 critique RCE non authentifi\u00e9e dans TeamCity On-Premises (CVE-2026-63077)\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nLe 27 juillet 2026, JetBrains a publi\u00e9 sur son \u2026\nhttps://cyberveille.ch/posts/2026-07-29-vulnerabilite-critique-rce-non-authentifiee-dans-teamcity-on-premises-cve-2026-63077/ #CI_CD #Cyberveille", "creation_timestamp": "2026-07-29T16:00:06.524996Z"}, {"uuid": "6e4aaf1f-7340-4eab-b614-95b77e2376f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mrsfhwkcmu2z", "content": "\ud83d\udea8 CRITICAL ALERT: JetBrains patches CVE-2026-63077, a 9.8 CVSS unauthenticated RCE in TeamCity On-Premises. All versions affected. Exploit allows full server takeover. Upgrade immediately to prevent supply chain attacks! #TeamCity #CI/CD #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-29T16:58:04.351112Z"}, {"uuid": "f60b4eb4-76c2-4a4f-9931-da79a338c85b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrsjhg2np42f", "content": "CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity - Darren Cho #CVE202663077 #JetBrains #TeamCity", "creation_timestamp": "2026-07-29T18:09:21.652966Z"}, {"uuid": "8f1acde8-6736-4f6d-9c3b-e7d7c4eed355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrsjhhw7d42p", "content": "CVE-2026-63077: JetBrains TeamCity Exposes CI/CD Pipelines to RCE Risk #CVE2026 #JetBrains #TeamCity", "creation_timestamp": "2026-07-29T18:09:23.856317Z"}, {"uuid": "74273e8a-bb8e-4788-85e0-2e8d51ba37f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrsjhjzhux2m", "content": "CVE-2026-63077 Exposes TeamCity's Lax Security \u2014 Organizations Must Act Now #CVE2026 #TeamCity #Cybersecurity", "creation_timestamp": "2026-07-29T18:09:26.265332Z"}, {"uuid": "180508e1-8436-403e-8796-e58976b844fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrsjhmnn5b2j", "content": "CVE-2026-63077: JetBrains TeamCity Vulnerability Exposes Systemic Risk #CyberSecurity #VulnerabilityManagement #RemoteCodeExecution", "creation_timestamp": "2026-07-29T18:09:28.572763Z"}, {"uuid": "a8c6f6ed-8992-4616-8887-c650d3a141bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrsjhppecm2o", "content": "CVE-2026-63077: JetBrains TeamCity Vulnerability's Hype Exceeds Evidence #CVE2026 #JetBrains #TeamCity", "creation_timestamp": "2026-07-29T18:09:32.647351Z"}, {"uuid": "3659708a-dd9f-489b-aa68-a3afa606349e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrsjln7b7p2m", "content": "CVE-2026-63077: JetBrains TeamCity Vulnerability \u2013 Urgency or Complacency? #CyberSecurity #Vulnerability #JetBrains", "creation_timestamp": "2026-07-29T18:11:43.765924Z"}, {"uuid": "f9e73332-f5a4-4fd3-b054-fc0263cc2107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mrt37hsh5k2g", "content": "CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity\n\n", "creation_timestamp": "2026-07-29T23:27:02.409424Z"}, {"uuid": "36585ad1-89a7-454f-9cd3-0c6e0c136499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "published-proof-of-concept", "source": "Telegram/gTfAuYBR7n10PAuOXXWlNdRE6KFeE30YWu4DIhMak_L1NA", "content": "", "creation_timestamp": "2026-07-30T00:02:06.369003Z"}]}