CVE-2026-63077

CVSS

—

EPSS

0.098 (95.4th percentile)

CISA KEV

Added 2026-08-05, due 2026-08-08

Exploitation

No report

Public exploits

6 repositories

State

Unknown

Coverage

• ● Actively exploitedCritical 95CISA advisories & alerts05 Aug, 12:00

  CISA Adds One Known Exploited Vulnerability to Catalog

  CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-63077 JetBrains TeamCity Deserialization of Untrusted Data Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors…

  ↗cisa.gov/news-events/alerts/2026/08/05/cisa-add…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:28poc publishedpoc-in-github
2. 24 Sept, 12:14poc publishedpoc-in-github
3. 24 Sept, 11:51poc publishedpoc-in-github
4. 24 Sept, 11:50kev addedcisa-kev