# Jetbrains Teamcity


- [CVE-2026-63077](https://insights.sbomify.com/CVE-2026-63077/): JetBrains TeamCity Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2024-27198](https://insights.sbomify.com/CVE-2024-27198/): JetBrains TeamCity Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2023-42793](https://insights.sbomify.com/CVE-2023-42793/): JetBrains TeamCity Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2024-27199](https://insights.sbomify.com/CVE-2024-27199/): JetBrains TeamCity Relative Path Traversal (high 7.3, exploited in the wild)
- [CVE-2024-23917](https://insights.sbomify.com/CVE-2024-23917/): Auth bypass in TeamCity (critical 9.8)
- [CVE-2022-24331](https://insights.sbomify.com/CVE-2022-24331/): Auth bypass in n/a (critical 9.8)
- [CVE-2022-24340](https://insights.sbomify.com/CVE-2022-24340/): XML external entity in n/a (critical 9.8)
- [CVE-2022-25263](https://insights.sbomify.com/CVE-2022-25263/): Command injection in n/a (critical 9.8)
- [CVE-2021-43202](https://insights.sbomify.com/CVE-2021-43202/): Security feature bypass in n/a (critical 9.8)
- [CVE-2021-43193](https://insights.sbomify.com/CVE-2021-43193/): Code injection in n/a (critical 9.8)
- [CVE-2021-43200](https://insights.sbomify.com/CVE-2021-43200/): Missing authorization in n/a (critical 9.8)
- [CVE-2021-37544](https://insights.sbomify.com/CVE-2021-37544/): Deserialization in n/a (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/jetbrains/teamcity/