Actively exploited vulnerabilities affecting JetBrains products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-63077https://wildfortech.com/security#CVE-2026-63077JetBrains TeamCity, a widely used CI/CD build server, contains a deserialization flaw in its agent polling protocol that lets unauthenticated attackers execute arbitrary code remotely. Because the vulnerable protocol is used by build agents to communicate with the server, an attacker who can reach that endpoint needs no credentials to potentially take full control of the TeamCity instance — and by extension, the build pipelines and artifacts it manages.Wed, 05 Aug 2026 00:00:00 GMTJetBrainsTeamCityhttps://wildfortech.com/security#CVE-2024-27199https://wildfortech.com/security#CVE-2024-27199This path traversal flaw in JetBrains TeamCity lets attackers navigate outside intended directories to perform limited administrative actions without proper authorization. TeamCity is a widely used CI/CD build server, meaning it sits at the heart of software development pipelines and often holds sensitive credentials and source code access. The vulnerability is actively exploited in ransomware campaigns, making it an urgent risk for any organization running an unpatched TeamCity instance.Mon, 20 Apr 2026 00:00:00 GMTJetBrainsTeamCity