Vendor
JetBrains
696 known vulnerabilities in products by JetBrains, 4 of them actively exploited (CISA KEV).
Key figures
696
Vulnerabilities
4
Actively exploited (KEV)
4
Used by ransomware
80
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2026-63077 | JetBrains TeamCity Deserialization of Untrusted Data Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2024-27198 | JetBrains TeamCity Authentication Bypass Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2023-42793 | JetBrains TeamCity Authentication Bypass Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2024-27199 | JetBrains TeamCity Relative Path Traversal Vulnerability In CISA KEVRansomware | 7.3 | |
| Critical | CVE-2024-23917 | JetBrains TeamCity: Authentication Bypass Using an Alternate Path or Channel | 9.8 | |
| Critical | CVE-2019-15039 | JetBrains TeamCity: Remote Code Execution | 9.8 | |
| Critical | CVE-2024-37051 | JetBrains IntelliJ IDEA: Insufficiently Protected Credentials | 9.3 | |
| Critical | CVE-2020-25207 | JetBrains Toolbox App: Remote Code Execution | 9.8 | |
| Critical | CVE-2019-9186 | JetBrains IntelliJ IDEA: security vulnerability | 9.8 | |
| Medium | CVE-2025-52876 | JetBrains TeamCity: Cross-site Scripting | 5.4 | |
| Critical | CVE-2022-24442 | JetBrains YouTrack: Template Injection | 9.8 | |
| Critical | CVE-2019-10104 | JetBrains IntelliJ IDEA: security vulnerability | 9.8 | |
| Medium | CVE-2025-59456 | JetBrains TeamCity: Relative Path Traversal | 5.5 | |
| Critical | CVE-2019-18364 | JetBrains TeamCity: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2021-25770 | JetBrains YouTrack: Template Injection | 9.8 | |
| Medium | CVE-2025-52877 | JetBrains TeamCity: Cross-site Scripting | 4.8 | |
| Critical | CVE-2021-31909 | JetBrains TeamCity: Argument Injection | 9.8 | |
| Critical | CVE-2021-31915 | JetBrains TeamCity: OS Command Injection | 9.8 | |
| Medium | CVE-2025-31140 | JetBrains TeamCity: Cross-site Scripting | 4.6 | |
| Medium | CVE-2024-24942 | JetBrains TeamCity: Relative Path Traversal | 5.3 | |
| Medium | CVE-2022-48343 | JetBrains TeamCity: Cross-site Scripting | 5.4 | |
| High | CVE-2024-47949 | JetBrains TeamCity: Relative Path Traversal | 4.9 | |
| Medium | CVE-2024-31138 | JetBrains TeamCity: Cross-site Scripting | 4.6 | |
| High | CVE-2022-24342 | JetBrains TeamCity: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2025-68165 | JetBrains TeamCity: Cross-site Scripting | 5.4 |
News
- CISA Adds Five CVEs to Known Exploited Vulnerabilities Catalogsans-newsbites-mail,
- CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wildthehackernews,
- Hackers Start Exploiting Recent JetBrains TeamCity Vulnerabilitysecurityweek,
- JetBrains says a crafted HTTP request could break TeamCitycsoonline,
- Critical Code Execution Vulnerability Patched in TeamCitysecurityweek,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 29sans-atrisk-mail,
Products
| Product | CVEs | Actively exploited |
|---|---|---|
| JetBrains TeamCity | 284 | 4 |
| JetBrains YouTrack | 180 | 0 |
| JetBrains IntelliJ IDEA | 139 | 0 |
| You Track | 55 | 0 |
| JetBrains Hub | 38 | 0 |
| JetBrains Ktor | 22 | 0 |
| JetBrains PyCharm | 12 | 0 |
| JetBrains Toolbox App | 11 | 0 |
| JetBrains Rider | 10 | 0 |
| JetBrains GoLand | 9 | 0 |
| JetBrains WebStorm | 9 | 0 |
| JetBrains Kotlin | 7 | 0 |
| JetBrains PhpStorm | 6 | 0 |
| Toolbox App | 6 | 0 |
| Youtrack Mobile | 6 | 0 |
| Upsource | 5 | 0 |
| JetBrains ReSharper | 4 | 0 |
| JetBrains RubyMine | 4 | 0 |
| Code With Me | 3 | 0 |
| JetBrains Junie | 3 | 0 |
| Space | 3 | 0 |