Actively exploited
Listed in CISA’s Known Exploited Vulnerabilities catalog since August 5, 2026.
CVE-2026-63077
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
Added to KEV August 5, 2026
Alert details
- Source feed
- CISA KEV
- CVE ID
- CVE-2026-63077
- CWE
- CWE-502
- Affected products
- TeamCity · JetBrains TeamCity · JetBrains
What happened
JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.
What it means for your business
JetBrains TeamCity is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-63077). JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol. CISA remediation due date: 2026-08-08. If you need help checking exposure, call (864) 335-9223.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CISA due date: August 8, 2026
Sources
Related briefs
Windows Win32k Elevation of Privilege vulnerability
Windows Win32k Elevation of Privilege vulnerability (CVE-2026-54986) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows Media Elevation of Privilege vulnerability
Windows Media Elevation of Privilege vulnerability (CVE-2026-50677) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Windows NTFS Remote Code Execution vulnerability
Windows NTFS Remote Code Execution vulnerability (CVE-2026-50448) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.
Microsoft Partner Center Elevation of Privilege vulnerability
Microsoft Partner Center Elevation of Privilege vulnerability (CVE-2026-96207) was added to Microsoft’s security update guidance. <p>Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.
Need help patching?
PremierePC monitors KEV alerts for managed clients and helps teams prioritize remediation before attackers do.