Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

JetBrains: actively exploited vulnerabilities

4 vulnerabilities in JetBrains products (TeamCity) are in CISA’s catalog of exploited vulnerabilities, 1 of them added in the last 90 days. Last added: August 5, 2026.

JetBrains security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one JetBrains category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • TeamCity 4 vulnerabilities · Development and CI/CD

Name used by CISA: JetBrains. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this JetBrains list.

  1. Rank 1JetBrains TeamCity

    CVE-2026-63077

    Hunt for compromise (CISA)Ransomware

    JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Aug 5, 2026
    CISA deadline
    3 days
    CVSS severity
    9.8 (critical)

  2. Rank 2JetBrains TeamCity

    CVE-2024-27199

    RansomwareCVE from 2024, added in 2026

    JetBrains TeamCity Relative Path Traversal Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Apr 20, 2026
    CISA deadline
    14 days
    CVSS severity
    7.3 (high)

  3. Rank 3JetBrains TeamCity

    CVE-2024-27198

    Ransomware

    JetBrains TeamCity Authentication Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 7, 2024
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  4. Rank 4JetBrains TeamCity

    CVE-2023-42793

    Ransomware

    JetBrains TeamCity Authentication Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 4, 2023
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.