CISA Flags TeamCity CVE-2026-63077 Under Active Attack

CISA warns that CVE-2026-63077, a critical JetBrains TeamCity deserialization flaw with a CVSS score of 9.8, is under active exploitation. Unauthenticated attackers can execute arbitrary OS commands via the agent polling protocol. Federal agencies must patch by August 8, 2026.