JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

概要

参考情報

• jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2026-63077

teamcity のその他の脆弱性

• CVE-2026-111096中 5.4In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible
• CVE-2026-111095中 5.4In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible
• CVE-2026-111094緊急 9.8In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was p…
• CVE-2026-106219高 7.5In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server
• CVE-2026-106218緊急 10.0In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible