CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–4 of 4 records

CVE Vendor Product Added Due Status
CVE-2026-63077 — JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.
JetBrains TeamCity Aug 5, 2026 Aug 8, 2026 Ransomware
CVE-2024-27199 — JetBrains TeamCity Relative Path Traversal Vulnerability
JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed.
JetBrains TeamCity Apr 20, 2026 May 4, 2026 Ransomware
CVE-2024-27198 — JetBrains TeamCity Authentication Bypass Vulnerability
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.
JetBrains TeamCity Mar 7, 2024 Mar 28, 2024 Ransomware
CVE-2023-42793 — JetBrains TeamCity Authentication Bypass Vulnerability
JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.
JetBrains TeamCity Oct 4, 2023 Oct 25, 2023 Ransomware