CVE-2026-63077

CRITICAL

Jetbrains TeamCity < 2026.1.3, 2025.11.7 - Deserialization of Untrusted Data

Title source: rule
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-63077. PoCs published by unveiledhistory49.

AI-analyzed exploit summary This repository provides comprehensive remediation and forensic analysis tooling for CVE-2026-63077, an unauthenticated RCE vulnerability in JetBrains TeamCity's agent polling protocol. It includes scripts for log analysis, process inspection, patch verification, and post-exploitation forensics, but does not contain exploit code.

Description

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

Exploits (1)

github WRITEUP
by unveiledhistory49 · pythonpoc
https://github.com/unveiledhistory49/teamcity-cve-2026-63077-remediation

This repository provides comprehensive remediation and forensic analysis tooling for CVE-2026-63077, an unauthenticated RCE vulnerability in JetBrains TeamCity's agent polling protocol. It includes scripts for log analysis, process inspection, patch verification, and post-exploitation forensics, but does not contain exploit code.

Classification
Writeup 98%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: JetBrains TeamCity (versions prior to 2023.11.5 and 2024.03.2)
No auth needed
Prerequisites: Access to TeamCity server logs and filesystem · Privileges to inspect running processes and system configurations
mistral-large-3 · analyzed Jul 31, 2026 Full analysis →

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.0065
EPSS Percentile 47.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-502
Status published
Products (1)
JetBrains/TeamCity < 2026.1.3, 2025.11.7
Published Jul 27, 2026
Tracked Since Jul 27, 2026