Known exploited vulnerabilities
JetBrains vulnerabilities attackers have used
Every JetBrains vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.
The short answer
CISA lists 4 JetBrains vulnerabilities as exploited in the wild, 2 of them added in the last 12 months and 4 used in ransomware campaigns. The most recent is CVE-2026-63077, added Aug 5, 2026. TeamCity has the most entries (4).
- In KEV, all time
- 4
- Added, last 12 months
- 2
- Used in ransomware
- 4
- New CVEs this week
- 0
Every JetBrains entry in CISA KEV
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.
JetBrains TeamCity Relative Path Traversal Vulnerability
JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed.
JetBrains TeamCity Authentication Bypass Vulnerability
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.
JetBrains TeamCity Authentication Bypass Vulnerability
JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.
Related
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.