{"uuid": "b2db9db4-eede-4255-aff1-d4f40a61bf59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63077", "type": "seen", "source": "https://t.me/pphm_HackerNews/2383", "content": "\ud83d\udd34 Critical Code Execution Vulnerability Patched in TeamCity \n\nJetBrains this week rolled out patches for a critical-severity vulnerability in TeamCity On-Premises that can be exploited without authentication.\n\nTracked as CVE-2026-63077 (CVSS score of 9.8), the security defect can be exploited via HTTP/S to bypass authentication and achieve remote code execution (RCE).\n\n\u201cAn unauthenticated attacker could exploit the vulnerability via the TeamCity agent polling protocol to bypass authentication checks and execute arbitrary operating system commands with the privileges of the TeamCity server process,\u201d JetBrains explains in its advisory.", "creation_timestamp": "2026-08-21T23:00:07.090298Z"}