Back to CVE Browser

CVE-2024-27199

🔥 Known Exploited (CISA KEV)HIGH

7.3

CVSS Severity Score

EPSS Score51.0120%

EPSS Percentile91.34th

Published2024-03-04

Last Modified2026-06-17

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

Affected Platforms (CPE)

📦

Jetbrains

Teamcity

< 2023.11.4

References & Advisories

🔗 https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive

🔗 https://www.jetbrains.com/privacy-security/issues-fixed/

🔗 https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive

🔗 https://www.jetbrains.com/privacy-security/issues-fixed/

🔗 https://github.com/Stuub/RCity-CVE-2024-27198/blob/main/RCity.py

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27199

Related Security Intelligence Articles

Daily Global Cyber Threat Intelligence Digest — July 29, 2026

Today’s threat intelligence covers active exploitation of Arista VeloCloud CVE-2026-16812, unauthenticated TeamCity RCE CVE-2026-63077, exposed IPMI/BMC password risks, and the Origin Energy and MCBS breach updates.

Daily Global Cyber Threat Intelligence Digest — July 24, 2026

This digest covers active exploitation of Check Point CVE-2026-16232 SmartConsole authentication bypass, Russian LAUNDRY BEAR targeting Zimbra vulnerabilities, malicious Claude Desktop ad campaigns deploying SectopRAT, and Chaos ransomware msaRAT operations.

Related Vulnerabilities

CVE-2026-630779.8

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

CVE-2026-597968.1

In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks

CVE-2026-597958.1

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

CVE-2026-597947.3

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data