Home / CVEs
Exploited vulnerabilities (CISA KEV)
CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.
CVE-2026-63077
Critical · 9.8
KEV Urgent · 93 Public exploit Ransomware CWE-502 Jul 27, 2026
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
CVE-2024-27198
Critical · 9.8
KEV Urgent · 93 Public exploit Ransomware CWE-288 Mar 4, 2024
JetBrains TeamCity Authentication Bypass Vulnerability
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
CVE-2024-27199
High · 7.3
KEV Urgent · 73 Public exploit Ransomware CWE-22 Mar 4, 2024
JetBrains TeamCity Relative Path Traversal Vulnerability
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
CVE-2023-42793
Critical · 9.8
KEV Urgent · 93 Public exploit Ransomware CWE-306 Sep 19, 2023
JetBrains TeamCity Authentication Bypass Vulnerability
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible