TeamCity

This post is a follow-up to our July 27, 2026, announcement about CVE-2026-63077. Summary Since our initial announcement on July 27, 2026, we have received reports of active exploitation, as well as attempted exploitation, targeting unpatched TeamCity servers. We strongly recommend that cu…

Update to the latest version to benefit from the latest improvements and security fixes.

August 7, 2026 update: Please also see this follow-up blog post for additional guidance. Summary A critical security vulnerability has been identified in TeamCity On-Premises and assigned the Common Vulnerabilities and Exposures (CVE) identifier CVE-2026-63077. If exploited, this vulnerabi…

Summary A high-severity post-authentication security vulnerability has been identified in TeamCity On-Premises and assigned the CVE identifier CVE-2026-44413. It may allow any authenticated user to expose some parts of the TeamCity server API to unauthorized users. It affects all TeamCity …

Why do attackers often go after plugin ecosystems that power many CI/CD platforms? Learn from this blog post.

A practical guide to penetration testing that explains key methods, tools, and business value, plus how to integrate testing into your CI/CD pipeline.

This post covers the key best practices for CI/CD security to help you protect your pipeline, automate defenses, securely manage secrets, and monitor for threats.

Summary A critical security vulnerability was identified in TeamCity On-Premises (initially discovered and reported by an external security researcher on January 19, 2024). This critical security vulnerability has been assigned the CVE identifier CVE-2024-23917 and presents the weakness CWE-2…