CISA adds exploited JetBrains TeamCity flaw to KEV Catalog

By Atlas Watchline Staff · Regulatory · August 5, 2026

CISA added a JetBrains TeamCity vulnerability to its Known Exploited Vulnerabilities Catalog after finding evidence of active exploitation.

CISA said Wednesday it added CVE-2026-63077, a JetBrains TeamCity vulnerability, to its Known Exploited Vulnerabilities Catalog after finding evidence of active exploitation.

The agency said the catalog is used to flag flaws it says are being used in real-world attacks, especially for federal civilian agencies that must follow its vulnerability management directive.

CISA described CVE-2026-63077 as a deserialization of untrusted data vulnerability in JetBrains TeamCity. In its alert, the agency said vulnerabilities of this type are a frequent attack vector for malicious cyber actors and can pose significant risks to the federal enterprise.

The notice cites Binding Operational Directive 26-04, titled Prioritizing Security Updates Based on Risk. CISA said the directive sets vulnerability management requirements for Federal Civilian Executive Branch agencies and tells them to prioritize rapid remediation of high-risk vulnerabilities, including CVEs listed in the KEV Catalog on publicly exposed assets that grant total control of the asset after exploitation.

CISA also said the directive allows agencies to defer lower-risk vulnerabilities and establishes expectations for when they must check whether threat actors compromised a system before a patch was applied.

The agency said BOD 26-04 applies only to Federal Civilian Executive Branch agencies, but it encourages all organizations to use risk-based vulnerability management and to prioritize fixing KEV Catalog items.

CISA said it will continue adding vulnerabilities that meet its criteria. It said potential additions must have a CVE ID, evidence of exploitation and clear mitigation guidance.

Sources

• CISA alert: CISA adds one Known Exploited Vulnerability to Catalog
• CISA RSS payload

Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.

This is the AMP version of the article. Read the full article on Atlas Watchline.