Database/Control plane, storage & DevOps
JetBrains TeamCity: Deserialization in the agent polling protocol
CVE-2026-63077Control plane, storage & DevOpsKnown exploitedcurated
Impact
[KEV] Deserialization in the agent polling protocol -> unauthenticated remote code execution on the CI server
Who can reach it
Network (remote)
What to do
Control-plane: URGENT upgrade to 2026.1.3/2025.11.7; rotate all build secrets and signing keys
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.