JetBrains
CVEs currently on EVULNABLE's Priority Feed for JetBrains, and this vendor's own CISA KEV history.
CISA KEV additions over time
Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.
20 Apr – 12 Oct; busiest week: 1 added.
- Not ransomware-linked
- Ransomware-linked
- This week (so far)
| Week of | Added to KEV | Ransomware-linked |
|---|---|---|
| 2026-04-20 | 1 | 1 |
| 2026-04-27 | 0 | 0 |
| 2026-05-04 | 0 | 0 |
| 2026-05-11 | 0 | 0 |
| 2026-05-18 | 0 | 0 |
| 2026-05-25 | 0 | 0 |
| 2026-06-01 | 0 | 0 |
| 2026-06-08 | 0 | 0 |
| 2026-06-15 | 0 | 0 |
| 2026-06-22 | 0 | 0 |
| 2026-06-29 | 0 | 0 |
| 2026-07-06 | 0 | 0 |
| 2026-07-13 | 0 | 0 |
| 2026-07-20 | 0 | 0 |
| 2026-07-27 | 0 | 0 |
| 2026-08-03 | 1 | 1 |
| 2026-08-10 | 0 | 0 |
| 2026-08-17 | 0 | 0 |
| 2026-08-24 | 0 | 0 |
| 2026-08-31 | 0 | 0 |
| 2026-09-07 | 0 | 0 |
| 2026-09-14 | 0 | 0 |
| 2026-09-21 | 0 | 0 |
| 2026-09-28 | 0 | 0 |
| 2026-10-05 | 0 | 0 |
| 2026-10-12 (so far) | 0 | 0 |
In EVULNABLE's ranked feed
Showing all 4 JetBrains CVEs in EVULNABLE's ranked feed.
#1 95 Immediate CVE-2026-63077 ExigentCISA federal deadline · Overdue by 2 monthsRansomwareCISA KEV JetBrains — JetBrains TeamCity Deserialization of Untrusted Data Vulnerability KEV + ransomware, EPSS 89.6%, added to KEV within the last 90 days
EVRS 95/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#2 94 Immediate CVE-2023-42793 ExigentKEV since 2023 · listed over a yearRansomwareCISA KEV JetBrains — JetBrains TeamCity Authentication Bypass Vulnerability KEV + ransomware, EPSS 99.9%
EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#3 94 Immediate CVE-2024-27198 ExigentKEV since 2024 · listed over a yearRansomwareCISA KEV JetBrains — JetBrains TeamCity Authentication Bypass Vulnerability KEV + ransomware, EPSS 99.9%
EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#4 93 Immediate CVE-2024-27199 CISA federal deadline · Overdue by 5 monthsRansomwareCISA KEV JetBrains — JetBrains TeamCity Relative Path Traversal Vulnerability KEV + ransomware, EPSS 99.9%
EVRS 93/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.