March 5, 2024 update: Please also see this follow-up blog post that describes our insights and timeline for addressing these vulnerabilities. Summary Details Two new critical security vulnerabilities have been discovered in TeamCity On-Premises. If abused, the flaws may enable an unauthenticated attacker with HTTP(S) access to a TeamCity server to bypass the authentication checks … Continue reading Additional Critical Security Issues Affecting TeamCity On-Premises (CVE-2024-27198 and CVE-2024-27199) – Update to 2023.11.4 Now