pwn.watch: JetBrains incident updates https://pwn.watch/t/jetbrains Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:23:59 GMT [high] JetBrains TeamCity: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability: CISA added CVE-2026-63077 to the KEV catalog (due 2026-08-08). https://pwn.watch/i/jetbrains-teamcity-cve-2026-63077 jetbrains-teamcity-cve-2026-63077:2026-08-05:CISA added CVE-2026-63077 to the KEV catalog (due 2026-08-08). Wed, 05 Aug 2026 00:00:00 GMT high Status: closed, patched [critical] JetBrains TeamCity on-prem auth bypass (CVE-2024-27198) exploited: CISA added CVE-2024-27198 to the KEV catalog (federal deadline 2024-03-28) https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2024-27198-27199 jetbrains-teamcity-auth-bypass-cve-2024-27198-27199:2024-03-07:CISA added CVE-2024-27198 to the KEV catalog (federal deadline 2024-03-28) Thu, 07 Mar 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] JetBrains TeamCity on-prem auth bypass (CVE-2024-27198) exploited: CVE-2024-27198 published https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2024-27198-27199 jetbrains-teamcity-auth-bypass-cve-2024-27198-27199:2024-03-04:CVE-2024-27198 published Mon, 04 Mar 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-27198 Status: closed, patched [critical] JetBrains TeamCity on-prem auth bypass (CVE-2024-27198) exploited: CVE-2024-27199 published https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2024-27198-27199 jetbrains-teamcity-auth-bypass-cve-2024-27198-27199:2024-03-04:CVE-2024-27199 published Mon, 04 Mar 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-27199 Status: closed, patched [critical] JetBrains TeamCity on-prem auth bypass (CVE-2024-27198) exploited: JetBrains releases TeamCity 2023.11.4; Rapid7 publishes details of both auth bypasses https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2024-27198-27199 jetbrains-teamcity-auth-bypass-cve-2024-27198-27199:2024-03-04:JetBrains releases TeamCity 2023.11.4; Rapid7 publishes details of both auth bypasses Mon, 04 Mar 2024 00:00:00 GMT critical Source: https://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/ Status: closed, patched [critical] TeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793): CISA, FBI, NSA and partners: Russia's SVR exploiting TeamCity at scale (AA23-347A) https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793 jetbrains-teamcity-auth-bypass-cve-2023-42793:2023-12-13:CISA, FBI, NSA and partners: Russia's SVR exploiting TeamCity at scale (AA23-347A) Wed, 13 Dec 2023 00:00:00 GMT critical Source: https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-347a Status: closed, patched [critical] TeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793): Microsoft: North Korean actors Diamond Sleet and Onyx Sleet are exploiting it https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793 jetbrains-teamcity-auth-bypass-cve-2023-42793:2023-10-18:Microsoft: North Korean actors Diamond Sleet and Onyx Sleet are exploiting it Wed, 18 Oct 2023 00:00:00 GMT critical Source: https://www.microsoft.com/en-us/security/blog/2023/10/18/multiple-north-korean-threat-actors-exploiting-the-teamcity-cve-2023-42793-vulnerability/ Status: closed, patched [critical] TeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793): CISA adds CVE-2023-42793 to the KEV catalog https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793 jetbrains-teamcity-auth-bypass-cve-2023-42793:2023-10-04:CISA adds CVE-2023-42793 to the KEV catalog Wed, 04 Oct 2023 00:00:00 GMT critical Status: closed, patched [critical] TeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793): JetBrains releases TeamCity 2023.05.4 and a security patch plugin https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793 jetbrains-teamcity-auth-bypass-cve-2023-42793:2023-09-18:JetBrains releases TeamCity 2023.05.4 and a security patch plugin Mon, 18 Sep 2023 00:00:00 GMT critical Source: https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/ Status: closed, patched