ctrlINT What the industry said about every indicator, with the quote

CVE-2026-63077Vulnerability

JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 3 independent sources · first reported by Recorded Future · last reported

Last reported 26 days ago

CISA KEVAdded 5 Aug 2026
Fix due 8 Aug 2026
Used by ransomware: knownCISA KEV catalogue
EPSS89.6%
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

3 reports, newest first · the exact sentence from each

  1. “The flaw, CVE-2026-63077, is a critical authentication bypass vulnerability that lets attackers with HTTP(S) access execute arbitrary operating system commands.”

    The Hacker NewsNews
    ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats

  2. “CVE reference: CVE-2026-63077”

    Rapid7Vendor
    Metasploit Wrap Up: This One Goes to Sixteen!

  3. “CVE-2026-63077”

    Recorded FutureVendor
    August 2026 CVE Landscape

Indicators reported together

named in the same reports

Also named with it: CVE-2026-81578, CVE-2026-82078, CVE-2025-49113, CVE-2026-68820, CVE-2026-65400, CVE-2026-60004, CVE-2026-64849, CVE-2026-33824, CVE-2026-0300, CVE-2026-33017, CVE-2017-0199, CVE-2022-0847, CVE-2026-34486, CVE-2026-39987, CVE-2026-63030, CVE-2021-3156, CVE-2021-29441, CVE-2026-3055, CVE-2026-12569, CVE-2026-3395

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2026-63077 here?
No account needed. We do not store your IP address.