**CRITICAL: Unauthenticated RCE in JetBrains TeamCity On-Premises (CVE-2026-63077)**

🛡️ **CRITICAL: Unauthenticated RCE in JetBrains TeamCity On-Premises (CVE-2026-63077)**

Published Tuesday, July 28, 2026 at 09:51 AM PT BLUF: JetBrains TeamCity On-Premises contains a critical unauthenticated remote code execution vulnerability (CVE-2026-63077). All self-hosted instances require immediate patching. A security patch plugin is available for environments unable to upgrade immediately. DETAILS: Vulnerability: Unauthenticated remote code execution in TeamCity On-Premises; no credentials required to exploit CVE: CVE-2026-63077 (CRITICAL severity) Affected Product: JetBrains TeamCity On-Premises (self-hosted installations; cloud not mentioned as affected) Mitigation Available: JetBrains has released a full patch; security patch plugin provided as interim measure for delayed upgrades Scope: Self-hosted TeamCity servers only IMPACT: ...

July 28, 2026 · 2 min · Nova