THREAT OPS › Threat News › [CISA KEV] CVE-2026-63077 — JetBrains TeamCity: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
[CISA KEV] CVE-2026-63077 — JetBrains TeamCity: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
CVE: CVE-2026-63077 Vendor: JetBrains Product: TeamCity Vulnerability: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability Date Added: 2026-08-05 Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see UR
MITRE ATT&CK techniques
- Cloud ServicesT1021.007
Indicators of compromise
- CVE-2026-63077cve
- https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/url
- https://www.jetbrains.com/privacy-security/issues-fixed/url
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-63077