CISA Warns of TeamCity RCE Vulnerability Actively Exploited in Attacks

The U.S. Cybersecurity and Infrastructure Security Agency has warned that a critical JetBrains TeamCity flaw is being actively exploited. The vulnerability, tracked as CVE-2026-63077, can let an unauthenticated attacker run code remotely on vulnerable TeamCity On-Premises servers. CISA added the issue to its Known Exploited Vulnerabilities catalog on August 5 and set an August 8 remediation deadline for affected federal civilian agencies. TeamCity is a continuous integration and continuous delivery platform used to build, test, and deploy software. A compromise of its central server can create serious supply-chain risk. Attackers may gain access to source code, build settings, stored secrets, signing material, and deployment...

Läs hela artikeln hos källan.