JetBrains TeamCity Deserialization of Untrusted Data Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 05/08/2026. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| teamcity | ≥ 2026.1, < 2026.1.3< 2025.11.7 | 2026.1.32025.11.7 |
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free