Back to CVE Browser

CVE-2024-27198

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-03-04

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

Affected Platforms (CPE)

📦

Jetbrains

Teamcity

< 2023.11.4

References & Advisories

🔗 https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive

🔗 https://www.jetbrains.com/privacy-security/issues-fixed/

🔗 https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive

🔗 https://www.jetbrains.com/privacy-security/issues-fixed/

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27198

Related Security Intelligence Articles

Global Cyber Intel Digest: July 24, 2026

This digest covers active exploitation of Check Point CVE-2026-16232 SmartConsole authentication bypass, Russian LAUNDRY BEAR targeting Zimbra vulnerabilities, malicious Claude Desktop ad campaigns deploying SectopRAT, and Chaos ransomware msaRAT operations.

Related Vulnerabilities

CVE-2026-597968.1

In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks

CVE-2026-597958.1

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

CVE-2026-597947.3

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data

CVE-2026-597938.8

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration