Vulnerabilities in JetBrains TeamCity, YouTrack, and other build/collaboration servers — CI/CD infrastructure whose compromise puts the entire downstream software supply chain at risk of build poisoning and artifact tampering. Combined article + CVE feed for the JetBrains beat.https://0daynews.com/en-ushttps://0daynews.com/articles/2026-09-06-jetbrains-cadence-teamcity-cve-2026-63077-breach/https://0daynews.com/articles/2026-09-06-jetbrains-cadence-teamcity-cve-2026-63077-breach/AWS keys, source code, and a server backup stolen from JetBrains Cadence after its TeamCity server went unpatched for weeks against CVE-2026-63077.Sun, 06 Sep 2026 06:00:00 GMTJetBrainsarticlehttps://0daynews.com/cve/cve-2023-42793/https://0daynews.com/cve/cve-2023-42793/JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.Sat, 05 Sep 2026 00:00:00 GMTJetBrainscriticalcvehttps://0daynews.com/cve/cve-2024-27198/https://0daynews.com/cve/cve-2024-27198/An authentication-bypass vulnerability in JetBrains TeamCity's web component allows a remote, unauthenticated attacker to perform admin actions on the CI/CD server, enabling full takeover of build pipelines.Sat, 05 Sep 2026 00:00:00 GMTJetBrainscriticalcvehttps://0daynews.com/cve/cve-2024-27199/https://0daynews.com/cve/cve-2024-27199/JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed.Sat, 05 Sep 2026 00:00:00 GMTJetBrainshighcvehttps://0daynews.com/cve/cve-2026-63077/https://0daynews.com/cve/cve-2026-63077/CVSS 9.8 critical. Unauthenticated remote code execution in all JetBrains TeamCity On-Premises versions, fixed in 2025.11.7 and 2026.1.3.Sat, 05 Sep 2026 00:00:00 GMTJetBrainscriticalcvehttps://0daynews.com/articles/2026-07-29-teamcity-cve-2026-63077-rapid7-agent-protocol/https://0daynews.com/articles/2026-07-29-teamcity-cve-2026-63077-rapid7-agent-protocol/Rapid7's ETR confirms CVE-2026-63077 sits in TeamCity's agent polling protocol — deserialization, no credentials needed. Patch to 2025.11.7 or 2026.1.3.Wed, 29 Jul 2026 23:00:00 GMTJetBrainsarticlehttps://0daynews.com/articles/2026-07-28-teamcity-cve-2026-63077-rce-all-onprem/https://0daynews.com/articles/2026-07-28-teamcity-cve-2026-63077-rce-all-onprem/JetBrains has patched CVE-2026-63077, a CVSS 9.8 unauthenticated RCE in all TeamCity On-Premises versions. Update to 2025.11.7 or 2026.1.3 now.Tue, 28 Jul 2026 10:00:00 GMTJetBrainsarticlehttps://0daynews.com/articles/2026-07-21-jetbrains-teamcity-cve-2024-27198-epss-0999-two-years-past-patch/https://0daynews.com/articles/2026-07-21-jetbrains-teamcity-cve-2024-27198-epss-0999-two-years-past-patch/JetBrains TeamCity's 2024 auth-bypass still ranks EPSS 0.999 more than two years post patch. Internet-facing build servers keep the exposed population alive.Tue, 21 Jul 2026 07:05:00 GMTJetBrainsarticle