CVE-2026-63077

Overview

JetBrains
TeamCity

27 Jul 2026

Published

06 Aug 2026

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

1.01%

MITRE

KEV

Description

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

Statistics

8 Posts
1 Interaction

Last activity: 7 hours ago

Fediverse

Michael I Ransier @thecybermind

🚨 CISA KEV ALERT: CVE-2026-63077 exposes JetBrains TeamCity servers to unauthenticated RCE via untrusted deserialization. Active exploitation confirmed. Get the forensic breakdown, CrowdStrike CQL detection logic, and CI/CD hardening steps: https://thecybermind.co/oapr

0
0
0
23h ago

Daily CyberSecurity @DailyCyberSecurity

TeamCity vulnerability CVE-2026-63077 enables unauthenticated remote code execution. CISA added it to the KEV catalog amid active exploitation.

#TeamCity #CVE202663077 #RCE #CISA #KEV #CyberSecurity

https://securityonline.info/teamcity-cve-2026-63077-rce/?utm_source=mastodon&utm_medium=jetpack_social

0
0
0
18h ago

AllAboutSecurity @allaboutsecurity

CVE-2026-63077: CISA warnt vor aktiver Ausnutzung einer TeamCity-Sicherheitslücke

Angreifer können ohne Authentifizierung Schadcode auf dem Server ausführen.

https://www.all-about-security.de/cve-2026-63077-cisa-warnt-vor-aktiver-ausnutzung-einer-teamcity-sicherheitsluecke/

#cybersecurity #cve #cisa #itsecurity #itsicherheit

0
0
0
13h ago

Michael I Ransier @thecybermind

🚨 CSUITE THREAT ADVISORY: CISA confirms active exploitation of CVE-2026-63077 in JetBrains TeamCity. Unauthenticated RCE threatens core build pipelines & supply chain integrity. Get the executive governance, risk management, and compliance brief now: https://thecybermind.co/jvee

0
0
0
7h ago

Bluesky

Information Security Briefly @infosecbriefly.bsky.social

CVE-2026-63077 in JetBrains TeamCity enables unauthenticated remote code execution via untrusted deserialization, requiring immediate patching of on-prem deployments.

0
1
0
13h ago

キタきつね @kitafox.bsky.social

CISAが既知の悪用された脆弱性を1件カタログに追加 CISA Adds One Known Exploited Vulnerability to Catalog #CISA (Aug 5) CVE-2026-63077 JetBrains TeamCityにおける信頼できないデータの逆シリアル化の脆弱性 www.cisa.gov/news-events/...

0
0
0
16h ago

All About Security @allaboutsecurity.bsky.social

CVE-2026-63077: CISA warnt vor aktiver Ausnutzung einer TeamCity-Sicherheitslücke - Angreifer können ohne Authentifizierung Schadcode auf dem Server ausführen. www.all-about-security.de/cve-2026-630... #itsecurity #itsicherheit #cve

0
0
0
13h ago

ReconBee @reconbee.bsky.social

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild reconbee.com/cisa-flags-t... #CISA #cybersecurity #RCEflaw #cyberattack #TeamCity

0
0
0
11h ago

CVE-2026-64561

Overview

Linux
Linux

04 Aug 2026

Published

04 Aug 2026

Updated

CVSS

Pending

EPSS

0.16%

MITRE

KEV

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages zaps an in-use root, i.e. marks it invalid, then KVM will attempt to map memory into an invalid root. On its own, populating an invalid root is "fine", but because child shadow pages inherit their parent's role, any children created during the map/fetch will be created as invalid pages, thus violating KVM's invariant that invalid pages are never on the list of active MMU pages. Note, the underlying flaw has existed since KVM first started tracking invalid roots in 2008 (commit 2e53d63acba7, "KVM: MMU: ignore zapped root pagetables"), but the true badness only came along in 2020 (Linux 5.9) with the invariant that invalid shadow pages can't be on the list of active pages. Note #2, inheriting role.invalid when creating child shadow pages is also far from ideal; that flaw will be addressed separately.

Statistics

3 Posts

Last activity: 1 hour ago

Bluesky

Hacker News Top Stories @hackernewsbot.bsky.social

Zapscape (CVE-2026-64561) | Discussion

0
0
0
1h ago

Hacker News 20 @betterhn20.e-work.xyz

Zapscape (CVE-2026-64561) https://github.com/V4bel/Zapscape (https://news.ycombinator.com/item?id=49198843)

0
0
0
1h ago

Information Security Briefly @infosecbriefly.bsky.social

Zapscape (CVE-2026-64561) is a KVM shadow-MMU use-after-free that can let a privileged L1 guest escape to host kernel/root execution when nested virtualization is exposed to untrusted guests.

0
0
0
1h ago

CVE-2026-64531

Overview

Linux
Linux

27 Jul 2026

Published

05 Aug 2026

Updated

CVSS v3.1

HIGH (7.8)

EPSS

0.13%

MITRE

KEV

Description

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbehaving actions length check") allowed the total sw_flow_actions stream to grow beyond 64 KiB, which is valid, but also removed the last guard preventing a generated nested action attribute from exceeding U16_MAX. An oversized generated container can thus be closed with a truncated nla_len. A later dump or teardown then walks a structurally different stream than the one that was validated. In particular, an oversized nested CLONE/CT action may cause subsequent bytes in the generated stream to be interpreted as independent actions. Keep the larger total-action-stream behavior, but make nested action close reject generated containers that do not fit in nla_len, and return the error through all callers. For recursive SAMPLE, CLONE, DEC_TTL, and CHECK_PKT_LEN builders, trim resource-owning action-list tails in reverse construction order before discarding failed wrappers, so resources copied into the rejected tails are released before the wrappers are removed. Most failed outer wrappers are discarded by truncating actions_len after child resources have been released. CHECK_PKT_LEN also trims its parent after branch resources are gone. SET/TUNNEL close failures unwind their known tun_dst ownership directly, and SET_TO_MASKED has no external ownership and truncates on close failure.

Statistics

3 Posts
2 Interactions

Last activity: 13 hours ago

Fediverse

Sam Stepanyan :verified: 🐘 @securestep9

#Linux: a 13-year-old Linux kernel flaw dubbed #OVSWrap lets local users gain root privileges on most Linux distributions. CVE-2026-64531 vulnerability is in the Linux kernel’s Open vSwitch datapath:
#PrivilegeEscalation
👇

https://securityaffairs.com/196657/hacking/ovswrap-13-year-old-linux-kernel-flaw-lets-local-users-become-root.html

1
1
1
13h ago

Bluesky

ohhara @shiojiri.com

Linuxカーネルの脆弱性「OVSwrap」：Open vSwitch経由でローカルユーザーがroot権限を取得可能に（CVE-2026-64531） | Codebook｜Security News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47047/

0
0
0
14h ago

CVE-2026-41679

Overview

paperclipai
paperclip

23 Apr 2026

Published

23 Apr 2026

Updated

CVSS v3.1

CRITICAL (10.0)

EPSS

1.97%

MITRE

KEV

Description

Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in `authenticated` mode with default configuration. No user interaction, no credentials, just the target's address. The chain consists of six API calls. The attack is fully automated, requires no user interaction, and works against the default deployment configuration. Version 2026.416.0 patches the issue.

Statistics

2 Posts

Last activity: 6 hours ago

Fediverse

OffSequence @offseq

CVE-2026-41679 | Paperclip AI platform CRITICAL vuln: auth bypass let attackers register, obtain API tokens, & run code as server. DNS rebinding risk in dev mode. Patch now. https://radar.offseq.com/threat/critical-paperclip-flaw-allowed-admin-access-code-execution-09ee35c54d49b29b #OffSeq #CVE #Paperclip #vuln

0
0
0
7h ago

Bluesky

Cybersecurity News Everyday @hendryadrian.bsky.social

Critical Paperclip flaw, CVE-2026-41679, let remote attackers self-register, approve a CLI challenge, and gain code execution with server permissions. Oasis Security also found data exposure and DNS rebinding issues. #Paperclip #CVE202641679

0
0
0
6h ago

CVE-2026-70426

Overview

Jenkins Project
Jenkins

05 Aug 2026

Published

06 Aug 2026

Updated

CVSS

Pending

EPSS

0.29%

MITRE

KEV

Description

In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS 2.568.1 and earlier, the JEP-200 class filter is not applied to classes resolved via a fallback path in the Remoting deserialization implementation, allowing agent processes, code running on agents, and attackers with Agent/Connect permission to bypass the JEP-200 deserialization filter for classes on the Jenkins core classpath.

Statistics

2 Posts

Last activity: 16 hours ago

Fediverse

Daily CyberSecurity @DailyCyberSecurity

Critical Jenkins vulnerability CVE-2026-70426 lets attackers bypass the JEP-200 filter and run code on the controller. Patch now.
#Jenkins #CVE202670426 #RCE #DevSecOps #Deserialization #CyberSecurity

https://securityonline.info/jenkins-cve-2026-70426-rce/?utm_source=mastodon&utm_medium=jetpack_social

0
0
0
18h ago

Bluesky

キタきつね @kitafox.bsky.social

CVE-2026-70426: Jenkinsの重大なリモートコード実行の脆弱性により、逆シリアル化フィルタが回避される CVE-2026-70426: Critical Jenkins RCE Flaw Bypasses Deserialization Filter #DailyCyberSecurity (Aug 6) securityonline.info/jenkins-cve-...

0
0
0
16h ago

CVE-2026-12569

Overview

PTC
Windchill PDMLink

18 Jun 2026

Published

01 Aug 2026

Updated

CVSS v4.0

CRITICAL (9.3)

EPSS

30.20%

MITRE

KEV

Description

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. * This advisory also applies to all CPS versions * The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030

Statistics

6 Posts

Last activity: 11 hours ago

Fediverse

CryptoLek 🍉🌻 @CryptoLek

Cl0p ransomware started listing victims from their campaign of exploitation of an RCE vuln in PTC Windchill PDMlink and PTC FlexPLM. The victims seem to be anonymised for now.

Exploited bug: https://www.cve.org/CVERecord?id=CVE-2026-12569

In fact, Ransomware-ISAC warned on 22 July about the campaign by Cl0p affiliates, targeting internet-exposed PTC Windchill and FlexPLM deployments: https://ransom-isac.org/blog/clop-windchill-flexplm-exploitation/

The vuln was added to CISA's KEV in the end of June.

0
0
0
13h ago

Bluesky

Cybersecurity News Everyday @hendryadrian.bsky.social

Clop ransomware reportedly hit ipm*******, exploiting CVE-2026-12569 and exfiltrating PDF, CAD, and other sensitive software data. #Clop #Ransomware #DataLeak

0
0
0
21h ago

Cybersecurity News Everyday @hendryadrian.bsky.social

Clop claims a ransomware hit on nuv*******, exploiting CVE-2026-12569 and exfiltrating Project and Soft data. #Clop #Ransomware #DataLeak

0
0
0
21h ago

Cybersecurity News Everyday @hendryadrian.bsky.social

Clop claims a breach of qc******* via CVE-2026-12569, saying database and project data were exfiltrated. No country was identified. #Clop #Ransomware #DataBreach

0
0
0
14h ago

Cybersecurity News Everyday @hendryadrian.bsky.social

Clop reportedly hit mid******* by exploiting CVE-2026-12569, with exfiltration of databases and project files. The claim does not name a country. #Clop #CVE202612569 #Ransomware

0
0
0
11h ago

Cybersecurity News Everyday @hendryadrian.bsky.social

Clop claimed a ransomware attack on flu*******, exploiting CVE-2026-12569 to steal databases, project data, and CAD files. #Ransomware #Clop #DataLeak

0
0
0
11h ago

CVE-2026-64564

Overview

Linux
Linux

04 Aug 2026

Published

04 Aug 2026

Updated

CVSS

Pending

EPSS

0.16%

MITRE

KEV

Description

In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctp_process_asconf() caches the transport the ASCONF chunk is processed against in asconf->transport (== chunk->transport, set once in sctp_rcv()). For an ASCONF located through its Address Parameter by __sctp_rcv_asconf_lookup(), that cached transport corresponds to the Address Parameter, which need not be the packet's source address. sctp_process_asconf_param() rejects a DEL-IP for the packet source address (ADDIP D8, SCTP_ERROR_DEL_SRC_IP), but nothing protects asconf->transport. A single ASCONF can therefore carry, in order: [Address Parameter L] [DEL-IP L] [DEL-IP 0.0.0.0] where L differs from the source. The DEL-IP for L passes the D8 check and calls sctp_assoc_rm_peer() on the transport that asconf->transport still points at, freeing it (RCU-deferred). The following wildcard DEL-IP then reuses the now-dangling asconf->transport in sctp_assoc_set_primary() and sctp_assoc_del_nonprimary_peers(): set_primary() dereferences the freed transport (->ipaddr, ->state) and plants the dangling pointer into asoc->peer.primary_path / active_path, and del_nonprimary_peers(), keeping only the pointer that is no longer on the list, removes every real transport, leaving the association with a transport_count of 0 and primary_path/active_path pointing at freed memory. Reject a DEL-IP that targets the transport the ASCONF is being processed against, mirroring the existing source-address guard, so the wildcard branch can never reuse a freed transport.

Statistics

3 Posts
17 Interactions

Last activity: 1 hour ago

Fediverse

Harry Sintonen @harrysintonen

Yet another linux LPE to root. "CVE-2026-64564: Linux SCTP ASCONF transport UAF leading to local privilege escalation and container escape"

https://www.openwall.com/lists/oss-security/2026/08/06/3

#CVE_2026_64564 #infosec #cybersecurity

5
5
0
4h ago

Harry Sintonen @harrysintonen

#Debian stable has a fix now: linux-image-6.12.101+deb13-amd64

- sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)

#CVE_2026_64564

3
1
0
1h ago

Harry Sintonen @harrysintonen

#CVE_2026_64564 mitigation:

echo install sctp /bin/true | sudo tee /etc/modprobe.d/sctp.conf

2
1
0
3h ago

CVE-2026-48282

Overview

Adobe
ColdFusion

30 Jun 2026

Published

08 Jul 2026

Updated

CVSS v3.1

CRITICAL (10.0)

EPSS

99.20%

MITRE

KEV

Description

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

Statistics

1 Post
4 Interactions

Last activity: 3 hours ago

Fediverse

Marvin @inmarvinwetrust

🚨 CVE-2026-48282: una semplice Path Traversal può trasformarsi in una Remote Code Execution su Adobe ColdFusion.

Nel video spiego:
🔴 cos'è RDS
🔴 perché il CVSS è 10.0
🔴 come avviene la catena di attacco
🔴 cosa controllare dopo aver applicato la patch

🎥 Guarda il video:
👉 https://youtu.be/SHYU1ag3NsQ

#CyberSecurity #ColdFusion #CVE202648282 #InfoSec #BlueTeam
@sicurezza

2
2
0
3h ago

CVE-2026-15573

Overview

Red Hat
Red Hat build of Keycloak 26.4
rhbk/keycloak-operator-bundle

05 Aug 2026

Published

05 Aug 2026

Updated

CVSS

Pending

EPSS

0.29%

MITRE

KEV

Description

A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies (PathMatcher) does not properly normalize URIs before comparison. By adding extra characters like a trailing slash or matrix parameters to a URL, an attacker can trick the system into applying a less restrictive security policy than intended. This allows an authenticated user to access administrative or restricted areas they should not have permission to see.

Statistics

1 Post
1 Interaction

Last activity: 20 hours ago

Fediverse

Hugo | DevOps | Cybersecurity @hugovalters

CVE-2026-15573 - High severity auth bypass in Red Hat Keycloak. URI normalization flaw lets authenticated users bypass policies to access restricted areas. CVSS 8.1. Unpatched - update when available. #CVE #Keycloak #infosec

https://www.valtersit.com/cve/CVE-2026-15573/

0
1
0
20h ago

CVE-2026-64600

Overview

Linux
Linux

23 Jul 2026

Published

05 Aug 2026

Updated

CVSS v3.1

HIGH (7.8)

EPSS

0.51%

MITRE

KEV

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, these two helpers cycle the ILOCK to grab a transaction, which means that the mappings are stale as soon as we reacquire the ILOCK. Currently we refresh the cow fork mapping by re-calling xfs_find_trim_cow_extent, but we don't refresh the data fork mapping beforehand, which means that the xfs_bmap_trim_cow in that function queries the refcount btree about the wrong physical blocks and returns an inaccurate value in *shared. If *shared is now false, the directio write proceeds with a stale data fork mapping. Fix this by querying the data fork mapping if the sequence counter changes across the ILOCK cycle.

Statistics

1 Post
1 Interaction

Last activity: 10 hours ago

Bluesky

EULE (EU Linux Evolution) @eulinuxevolutionde.eurosky.social

RefluXFS: Kritische Linux-Kernel-Schwachstelle (CVE-2026-64600) borncity.com/blog/2026/08... #Linux #LinuxNews #LinuxDE #LinuxNewsDE #LinuxEU #LinuxNewsEU #EULE #EULEde #RefluXFS #XFS

0
1
0
10h ago