Skip to content
feed: live
>_ 0dayNews
Vendor

JetBrains

Vulnerabilities in JetBrains TeamCity, YouTrack, and other build/collaboration servers — CI/CD infrastructure whose compromise puts the entire downstream software supply chain at risk of build poisoning and artifact tampering.

CVEs
CVE-2024-27198
[ CRITICAL ] CVSS 9.8 EPSS 99.9% kev

JetBrains TeamCity Authentication Bypass

An authentication-bypass vulnerability in JetBrains TeamCity's web component allows a remote, unauthenticated attacker to perform admin actions on the CI/CD server, enabling full takeover of build pipelines.

JetBrains / TeamCity
Articles
~/articles/2026-07-21-jetbrains-teamcity-cve-2024-27198-epss-0999-two-years-past-patch
TeamCity CVE-2024-27198: EPSS 0.999 two years past patch
● Breaking
jetbrains

TeamCity CVE-2024-27198: EPSS 0.999 two years past patch

JetBrains TeamCity's 2024 auth-bypass still ranks EPSS 0.999 more than two years post patch. Internet-facing build servers keep the exposed population alive.

read →