{"vulnerability": "cve-2026-63077", "sightings": [{"uuid": "ce2fd336-e0e1-4306-85fb-1b18eba08479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnidphmxq2j", "content": "CVE-2026-63077 - teamcity\nBefore updating to TeamCity 2026.1.3 or 2025.11.7, remote attackers could execute code on your server without needing a password. This is a serious risk because it allows\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#teamcity #jetbrains #CVE #infosec", "creation_timestamp": "2026-07-27T18:06:04.494253Z"}, {"uuid": "da1e252d-f814-4d0c-b4ba-fa0821221678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/thehackernews/9631", "content": "\ud83d\udea8 A critical TeamCity flaw could let attackers run OS commands without logging in.\n\nCVE-2026-63077 affects all on-premises versions and bypasses authentication through the agent polling protocol. JetBrains has released fixes and reports no known exploitation.\n\nFull details - https://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html", "creation_timestamp": "2026-07-28T09:00:06.972421Z"}, {"uuid": "1e56b16b-52b4-44d6-a9fe-f6de34658e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html", "content": "JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could result in arbitrary code execution.\n\nThe vulnerability, assigned CVE-2026-63077 (CVSS score: 9.8), affects all TeamCity On-Premises versions. It has been addressed in versions 2025.11.7 and 2026.1.3. TeamCity Cloud instances have already", "creation_timestamp": "2026-07-28T10:00:53.452239Z"}, {"uuid": "5071b43c-a931-43bf-8152-f51a469ac5b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrpa647vud2v", "content": "Critical TeamCity flaw (CVE-2026-63077) allows unauthenticated OS command execution. Update now. #TeamCity #JetBrains #CVE202663077 #SecurityUpdate #DevOps #CyberSecurity thedailytechfeed.com/critical-tea...", "creation_timestamp": "2026-07-28T10:45:06.861239Z"}, {"uuid": "dd9e8534-00ef-41eb-a51f-786d0c9370e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrpai57yr52j", "content": "\ud83e\udd16 CVE-2026-63077 (CVSS 9.8): Critical unauthenticated RCE in JetBrains TeamCity. No auth needed \u2014 OS command execution. Patch all on-prem versions immediately.\nhttps://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html", "creation_timestamp": "2026-07-28T10:50:43.299324Z"}, {"uuid": "6c3598ad-ee5f-4481-ac29-621e9534e80c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mrpb3eiidg2y", "content": "TeamCity \u306b\u8a8d\u8a3c\u306a\u3057\u3067OS \u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u53ef\u80fd\u306a\u91cd\u5927\u8106\u5f31\u6027 CVE-2026-63077\n\nCVE-2026-63077 \u306b\u3088\u308a\u3001\u8a8d\u8a3c\u306a\u3057\u306e\u653b\u6483\u8005\u304c TeamCity \u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c1\u30a7\u30c3\u30af\u3092\u56de\u907f\u3057\u3066 OS \u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u53ef\u80fd\u3002JetBrains \u304c\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-07-28T11:01:28.943974Z"}, {"uuid": "b8456fb9-19ea-46bc-81c4-27d988f1cf9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mrpbk2ndek2k", "content": "JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/07/28/t...\n\n#cybersecurity #cybersecuritynews #continuousintegration #enterprise #softwaredevelopment #vulnerability @jetbrains.com", "creation_timestamp": "2026-07-28T11:09:44.888123Z"}, {"uuid": "a87c8f40-58a9-4b90-a942-d36b34845003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mrpbwirxlo2h", "content": "JetBrains\u3001TeamCity On-Premises\u306e\u8a8d\u8a3c\u4e0d\u8981\u306a\u91cd\u5927\u306aRCE\u8106\u5f31\u6027(CVE-2026-63077)\u3092\u4fee\u6b63\n\nJetBrains\u306fTeamCity On-Premises\u306b\u5f71\u97ff\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027(CVE-2026-63077)\u3092\u4fee\u6b63\u3057\u3001\u30bb\u30eb\u30d5\u30db\u30b9\u30c8\u578b\u30b5\u30fc\u30d0\u30fc\u306e\u7ba1\u7406\u8005\u306b\u5bfe\u3057\u3066\u53ef\u80fd\u306a\u9650\u308a\u901f\u3084\u304b\u306b\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u3059\u308b\u3088\u3046\u547c\u3073\u304b\u3051\u3066\u3044\u307e\u3059\u3002 \u300c\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u304c\u3067\u304d\u306a\u3044\u74b0\u5883\u5411\u3051\u306b\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u30d7\u30e9\u30b0\u30a4\u30f3\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e...", "creation_timestamp": "2026-07-28T11:16:38.766491Z"}, {"uuid": "9b9da73f-b69b-423b-a84c-e11ff91d4f06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrpbyffirn2j", "content": "Administrators running self-hosted TeamCity On-Premises builds get the joy of dealing with CVE-2026-63077, where unauthenticated attackers exploit agent polling protocols to execute arbitrary commands at will. Rather than enjoying a peaceful brew, weary sysadmins must now rush to...\n\nRead full story", "creation_timestamp": "2026-07-28T11:17:42.050001Z"}, {"uuid": "56d1afe4-c624-42b1-bd29-13db449e2b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrpgftcq5423", "content": "CVE-2026-63077: JetBrains' Patch Fails to Address Systemic Response Gaps #CVE2026 #JetBrains #CyberSecurity", "creation_timestamp": "2026-07-28T12:36:49.737680Z"}, {"uuid": "4664fe43-8c0c-4ef2-a576-2dd287e1ab3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrpgfwhevo25", "content": "CVE-2026-63077: JetBrains' TeamCity Patch Does Not Address Prior Exploitation Risks #Cybersecurity #Vulnerability #CVE2026", "creation_timestamp": "2026-07-28T12:36:51.622217Z"}, {"uuid": "ff5e2141-a462-45e7-8a28-7597f8c0bcca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrpgki3oh32o", "content": "CVE-2026-63077: JetBrains' TeamCity Flaw Raises More Questions Than Answers #CVE2026 #TeamCity #JetBrains", "creation_timestamp": "2026-07-28T12:39:24.697681Z"}, {"uuid": "63876764-1a5d-4be7-95e3-e0ae6b5680a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrpgklpjbz2j", "content": "CVE-2026-63077: Urgency of JetBrains TeamCity Patch or Administrative Apathy? #CVE2026 #JetBrains #TeamCity", "creation_timestamp": "2026-07-28T12:39:27.648415Z"}, {"uuid": "f7bd8cb2-449b-4fa9-9268-1207788afe80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mrperkahk22z", "content": "JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)\n\nwww.helpnetsecurity.com/2026/07/28/t...\n\n#Kyberturvallisuus #Kyber #Tilannekuva", "creation_timestamp": "2026-07-28T12:07:35.332486Z"}, {"uuid": "4feec11a-dd6c-4d01-b1ad-e799017cfbd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrpfsifrsp22", "content": "\u26a0\ufe0f PATCH NOW\n\nJetBrains disclosed a critical TeamCity flaw (CVE-2026-63077, CVSS 9.8): an unauthenticated attacker who reaches the server can run commands and take it over.\n\nAffects every On-Premises version; no exploit seen yet.\n\nFix: update to 2025.11.7 / 2026.1.3, or put it behind a VPN.", "creation_timestamp": "2026-07-28T12:25:59.119701Z"}, {"uuid": "0fd18149-1f31-4d82-9cc4-f16105c47099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrpgfmsure23", "content": "CVE-2026-63077: JetBrains' TeamCity Flaw Opens Door for Server Takeover #CVE2026 #JetBrains #TeamCity", "creation_timestamp": "2026-07-28T12:36:41.933751Z"}, {"uuid": "40abce9d-780c-4024-bed4-b33850fee3ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrpgfqdkwt2o", "content": "CVE-2026-63077: JetBrains TeamCity Flaw Exposes Servers to Remote Takeover #CVE202663077 #JetBrains #TeamCity", "creation_timestamp": "2026-07-28T12:36:48.346701Z"}, {"uuid": "3a279834-ecda-4fbb-a712-7f0bdcffa195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63077", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mrplzji5jl2e", "content": "Critical TeamCity Flaw Allows Unauthenticated OS Command Execution \u2014 Patch Now\n\nhttps://blindthoughts.com/teamcity-cve-2026-63077-unauthenticated-rce\n\n#vulnerability #cicd #remotecodeexecution #patchnow #supplychainsecurity", "creation_timestamp": "2026-07-28T14:17:17.846911Z"}, {"uuid": "45e6f2ca-aa80-47eb-b806-73d75934f740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://threatintel.cc/2026/07/28/critical-teamcity-flaw-lets-unauthenticated.html", "content": "Critical TeamCity Flaw Lets Unauthenticated Attackers Execute System Commands\n\nA critical vulnerability (CVE-2026-63077) in TeamCity On-Premises allows unauthenticated attackers to execute arbitrary system commands, posing a major risk to CI/CD infrastructure. JetBrains has released patches in versions 2025.11.7 and 2026.1.3, urging administrators to update immediately to prevent potential security compromises.", "creation_timestamp": "2026-07-28T16:00:46.588081Z"}, {"uuid": "8629b75b-a3a7-443c-a5f6-0fcb4a629be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrpyrpfxao2r", "content": "JetBrains releases urgent updates for TeamCity On-Premises to fix critical vulnerability CVE-2026-63077. #JetBrains #TeamCity #CVE202663077 #SecurityUpdate #CyberSecurity #Vulnerability thedailytechfeed.com/jetbrains-ur...", "creation_timestamp": "2026-07-28T18:05:34.042765Z"}, {"uuid": "d8ac7405-a41f-40da-b6f3-8f019acc744c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mrpz7duvak2m", "content": "JetBrains has identified a critical vulnerability (CVE-2026-63077, CVSS 9.8) in all on-premise versions of TeamCity that allows unauthenticated attackers to execute arbitrary OS commands. This flaw can lead to exposure of sensitive data and configurations.", "creation_timestamp": "2026-07-28T18:13:11.866747Z"}]}