VulnSocial

CVE-2026-65907Patch

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 4 signals
  • Disclosure: 1 classified signal
  • Peaked 3d ago at 1 mentions (2026-07-24); latest day: 1
  • 4 total mentions across 4 days

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-07-24: 1Mentions · 2026-08-01: 1Mentions · 2026-08-13: 1Mentions · 2026-08-15: 1Patch / Workaround · 2026-07-24: 1Patch / Workaround · 2026-08-01: 1Patch / Workaround · 2026-08-13: 1Technical Details · 2026-07-24: 1Technical Details · 2026-08-01: 1Technical Details · 2026-08-13: 1Technical Details · 2026-08-15: 107-2408-0108-1308-15
Signal classification2 categories
Patch
375.0%
Disclosure
125.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-07-241
Patch1
2026-08-011
Patch1
2026-08-131
Patch1
2026-08-151
Disclosure1
Full discourse4 posts
  • Stanislav Klevtsov@stansecure
    Patch

    Top #CVE to #patch this week 👀 - @VMware #ESXi 9.0 RCE (CVE-2026-47876, CVE-2026-41703) - @JetBrains #TeamCity RCE (CVE-2026-63077, CVE-2026-65907) - #Jenkins Core (CVE-2026-70426) - @zohocorp ManageEngine ADAudit RCE (CVE-2026-6516) - @IBM Langflow RCE (CVE-2026-9198) - @ApacheKylin OS command injection (CVE-2026-62392) - #MOVEit auth bypass (CVE-2026-4670) - @giteaio unauth file read (CVE-2026-59774)

    Post summary

    A list of prominent CVEs is presented with a call to patch them promptly; no PoCs, exploits, or active abuse reports are mentioned.

    1000073
    44 followersView on X
  • takenaka hiroya@Joe_Biden_ja
    Disclosure

    TeamCity の同時期の修正から、もう1件を追加しました。NVD はまだ Undergoing Analysis で CPE も付いておらず、CVSS は JetBrains の 9.1 のみです。確定していない項目は、確定していないと書いたうえで載せています。 https://cve.autoarticles.net/cve/CVE-2026-65907

    Post summary

    An additional CVE (CVE‑2026‑65907) related to TeamCity was announced; it remains under NVD analysis with no CPE and only a JetBrains‑supplied CVSS score, and no PoC, exploit, or patch is referenced.

    0000064
    563 followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 CRITICAL: CVE-2026-65907 (CVSS 9.1) JetBrains TeamCity code execution flaw in Git VCS roots. Affects versions before 2026.1.2 & 2025.11.6. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/bacUBBJWae

    Post summary

    The tweet announces a critical code‑execution vulnerability in JetBrains TeamCity affecting older versions and urges users to apply patches immediately.

    0000058
    99 followersView on X
  • TECHEPAGES@techepages
    Patch

    JetBrains has released security updates addressing a critical code execution vulnerability in IntelliJ IDEA (CVE-2026-59792, path traversal in workspace ID handling) and four high-severity vulnerabilities in TeamCity, including a critical RCE flaw in Git VCS roots (CVE-2026-65907). Development teams and CI administrators are urged to upgrade immediately to IntelliJ IDEA 2026.1.4/2026.2 and TeamCity 2026.1.2/2025.11.6.

    Post summary

    JetBrains has released updates for two critical vulnerabilities—one path‑traversal code execution flaw and one RCE in TeamCity—and urges users to upgrade to the specified patch versions.

    0000082
    32 followersView on X

Explore more

Back to dashboard