PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Authentication bypass vulnerabilities in TeamCity: everything you need to know

wiz.io | vulnerability | #cloud | #authentication-bypass | #jetbrains | #teamcity | #vulnerability | #cve-2024-27198 | #cve-2024-27199
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

JetBrains patches TeamCity authentication bypass flaws—CVE-2024-27198 (CVSS 9.8) and CVE-2024-27199 (CVSS 7.3); unauthenticated attackers can take full control, with exploitation seen in the wild.
Published
Collected

Related coverage

Critical · vulnerability · github.com
CVE-2026-63077: JetBrains TeamCity unauthenticated RCE with public PoC and active exploitation
An unauthenticated attacker who can reach a TeamCity HTTP(S) service may execute arbitrary operating-system commands with the TeamCity server process privileges, exposing configuration and credentials, changing server state, and compromising build artifacts or downstream CI/CD pipelines. CISA KEV now confirms active exploitation. Upgrade to 2025.11.7, 2026.1.3, or later immediately; if upgrading is not possible, apply JetBrains' security patch plugin, restrict internet access, rotate exposed credentials, and investigate potentially exposed instances.
blog · portswigger.net
Behind enemy lines: bug hunting with Burp Infiltrator
Santiago Díaz demonstrates using Burp Infiltrator to uncover a 0day in JetBrains TeamCity, with Collaborator pingbacks exposing user input reaching dangerous sinks and revealing the code path.
vulnerability · wiz.io
[CVE-2026-111497] Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
vulnerability · wiz.io
PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet
Core PHP engine flaws enable remote code execution and Heartbleed-style memory disclosure across the web.
vulnerability · blog.quarkslab.com
Snapshotting our way to CVE-2026-9539
This blog post presents a LibAFL-Qemu based way to explore state machines and why we failed to find CVE-2026-9539.
vulnerability · blog.quarkslab.com
MbedTLS Security Audit
At the request of the Open Source Technology Improvement Fund (OSTIF), Quarkslab performed a security audit of mbedTLS, evaluating the security of the changes in version 4.0.
Back