Patchfirst
Patchfirst

Vendor

JetBrains

4 of 15 JetBrains CVEs in Patchfirst (27%) are in of vulnerabilities exploited in the wild, 4 of them used by ransomware.

CVEs
15
In CISA KEV
427%
Known ransomware use
4
Median days to KEV
12
from publication
Latest KEV listing
5 Aug 2026
Watch JetBrains Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • TeamCity In KEV: 4 CVEs: 14
  • Exposed In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with JetBrains CVEs
Open in ATT&CK Navigator

Counts are JetBrains CVEs linked to the technique. Each link’s provenance is on the CVE page.

JetBrains CVEs

15 CVEs, by priority
  1. CVE-2026-63077JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
    JetBrains · TeamCityKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    93.6%Top 0.16%
    89.8priority
  2. CVE-2024-27198JetBrains TeamCity Authentication Bypass Vulnerability
    JetBrains · TeamCityKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    99.9%Top 0.03%
    79.9priority
  3. CVE-2023-42793JetBrains TeamCity Authentication Bypass Vulnerability
    JetBrains · TeamCityKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.003Windows Command Shell
    >99.9%Top 0.02%
    79.9priority
  4. CVE-2024-27199JetBrains TeamCity Relative Path Traversal Vulnerability
    JetBrains · TeamCityKEVRansomwarePublic exploitHigh · 7.3T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    >99.9%Top 0.01%
    78.1priority
  5. CVE-2024-23917In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible
    JetBrains · TeamCityPublic exploitCritical · 9.8
    54.0%Top 1%
    67.3priority
  6. CVE-2022-48343In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process
    JetBrains · TeamCityMedium · 5.4
    59.5%Top 0.88%
    23.6priority
  7. CVE-2024-31138In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings
    JetBrains · TeamCityMedium · 4.6
    74.7%Top 0.5%
    23.1priority
  8. CVE-2023-34220In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible
    JetBrains · TeamCityMedium · 4.6
    61.4%Top 0.84%
    23.1priority
  9. CVE-2022-48428In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible
    JetBrains · TeamCityMedium · 4.6
    68.0%Top 0.68%
    23.1priority
  10. CVE-2023-41249In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step
    JetBrains · TeamCityMedium · 4.6
    55.5%Top 0.97%
    23.0priority
  11. CVE-2023-34225In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible
    JetBrains · TeamCityMedium · 4.6
    60.7%Top 0.85%
    23.0priority
  12. CVE-2025-46618In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab
    JetBrains · TeamCityLow · 3.5
    63.0%Top 0.8%
    22.3priority
  13. CVE-2026-111094In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build…
    JetBrains · TeamCityCritical · 9.8
    0.4%Top 67%
    15.7priority
  14. CVE-2026-108474In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions
    JetBrains · ExposedCritical · 9.8
    0.3%Top 75%
    14.3priority
  15. CVE-2026-106218In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible
    JetBrains · TeamCityCritical · 10.0
    0.3%Top 75%
    14.2priority
↑ ↓ chooseEnter openEsc close