CISA: Ransomware gangs now exploiting critical TeamCity flaw (3 minute read)

2026-09-25

CISA has issued a warning regarding CVE-2026-63077, an unauthenticated Remote Code Execution (RCE) vulnerability in JetBrains TeamCity On-Premises. This critical flaw, accessible via the agent polling protocol, is actively being exploited by ransomware gangs.