Jetbrains: community verdicts
5 notable / known-exploited Jetbrains CVEs the community has triaged.
ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Jetbrains CVE, see NVD ↗.
- CVE-2024-27199HIGH 7.3KEVEPSS 100%
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
- CVE-2023-42793CRIT 9.8KEVEPSS 100%
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
- CVE-2024-27198CRIT 9.8KEVEPSS 100%
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
- CVE-2026-63077CRIT 9.8KEVEPSS 11%
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
- CVE-2026-49373HIGH 7.1EPSS 13%
In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings