[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqEE8mb288La7311Ky1sbyaSW83FIjYIr-A55IVkIld0":3},{"article":4,"iocs":41,"watch_terms":46,"solutions":47,"lesson":136},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"bd72d329-a1d7-44c3-ab2c-fe17db37eaaf","JetBrains warns of critical TeamCity remote code execution flaw","jetbrains-warns-of-critical-teamcity-remote-code-execution-flaw-d7e6c8","JetBrains is warning of a critical authentication bypass vulnerability affecting TeamCity On-Premises that could be exploited to achieve remote code execution. [...]","JetBrains has issued a warning about a critical authentication bypass vulnerability, CVE-2026-63077, affecting all TeamCity On-Premises versions. This flaw allows attackers with HTTPS access to bypass authentication and execute arbitrary commands with server process privileges. While TeamCity Cloud is unaffected, on-premises users are urged to upgrade to versions 2025.11.7 or 2026.1.3, or apply a security patch plugin for older versions.","JetBrains warns of critical TeamCity RCE flaw CVE-2026-63077, affecting On-Premises versions.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fjetbrains-warns-of-critical-teamcity-remote-code-execution-flaw\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2024\u002F06\u002F11\u002FJetBrains.jpg","2026-07-30T22:01:31+00:00","2026-07-31T00:00:16.028823+00:00",9,[17,20],{"name":18,"type":19},"TeamCity","product",{"name":21,"type":22},"JetBrains","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":23,"icon":25,"name":26,"slug":27},null,"Vulnerabilities","vulnerabilities",[29,34,36],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":35},{"id":23,"icon":25,"name":26,"slug":27},{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[42],{"type":43,"value":44,"context":45},"cve","CVE-2026-63077","Critical authentication bypass vulnerability in TeamCity On-Premises",[21,18],{"controls":48,"vendors":135},[49,78,107],{"slug":50,"name":51,"problem":52,"products":53},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"zscaler","Zscaler","\u002Fvendor-logos\u002Fzscaler.png","zscaler-private-access","Zscaler Private Access","https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fzscaler-private-access","Zero trust access to private applications, replacing VPN.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-private-access","Netskope Private Access","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fprivate-access","Zero trust access to private applications.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-access","Cloudflare Access","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Faccess\u002F","Zero trust access to internal applications without a VPN.",{"slug":79,"name":80,"problem":81,"products":82},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[83,91,99],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":108,"name":109,"problem":110,"products":111},"patch-management","Automated patch management","Known holes get closed in days, not months.",[112,119,127],{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":108,"product_name":116,"url":117,"description":118},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",[],{"slug":137,"title":138,"body":139,"framework_refs":140,"framework_notes":151},"critical-teamcity-auth-bypass-enables-remote-code-execution","Critical TeamCity Auth Bypass Enables Remote Code Execution","A critical authentication bypass vulnerability (CVE-2026-63077) in JetBrains TeamCity On-Premises allows any attacker with HTTPS access to circumvent authentication entirely and execute arbitrary commands with server-level privileges — no credentials required. This is especially dangerous because TeamCity is a CI\u002FCD platform, meaning a compromised server can be weaponized to inject malicious code into build pipelines and software supply chains. The root cause reflects a failure in secure authentication design combined with delayed patching exposure for on-premises users. Organizations running unpatched versions remain fully exposed until upgrades or plugin patches are applied, highlighting the critical importance of rapid response to vendor security advisories.",[141,142,143,144,145,146,147,148,149,150],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 4: Secure Configuration of Enterprise Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST AC-3: Access Enforcement","NIST IA-2: Identification and Authentication","NIST SA-11: Developer Testing and Evaluation (Supply Chain context)","ITIL Change Management: Emergency Change Procedure","OWASP A07:2021 – Identification and Authentication Failures",{}]