Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)
2026-08-08T07:23:37Z•05174d7ccc4243cc1c2834196b9b8c2c520c04c43cb0f1a5568872d4c5c7e60d
CVE-2026-18556CVE-2026-18577CVE-2026-63077CVE-2026-66066Active-StorageJetBrains-TeamCityKEVMetasploitN-able-N-centralRuby-on-Railsarbitrary-file-readauthentication-bypassexploitation-in-the-wildremote-code-executionunauthenticated-rceunsafe-deserializationvulnerability
What happened
Rapid7 reporting highlights multiple August 2026 security developments, including in-the-wild exploitation of critical unauthenticated vulnerabilities in JetBrains TeamCity and N-able N-central, as well as a critical arbitrary file-read vulnerability in Ruby on Rails Active Storage that may lead to remote code execution. The feed also contains Metasploit Pro product news, business announcements, and Black Hat event information.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- rapid7_blog
- Record identifier
- 05174d7ccc4243cc1c2834196b9b8c2c520c04c43cb0f1a5568872d4c5c7e60d
- Enrichment time
- 2026-08-08T07:23:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.