Question 1

What is CVE-2026-63077 — JetBrains TeamCity Deserialization of Untrusted Data Vulnerability?

Accepted Answer

JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.

Question 2

What is the authoritative source for CVE-2026-63077?

Accepted Answer

JetBrains TeamCity Deserialization of Untrusted Data Vulnerability (CVE-2026-63077) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	9.8 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	89.57% probability of exploitation · percentile 99.8% · 2026-09-30T12:00:21Z
Last modified	2026-08-06

CVE-2026-63077JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

Description

Scoring

CISA KEV entry