zknews

trending1

tag: exploitation ✕

01▲
CVE-2026-63077: TeamCity Pre-Auth RCE Explained blog.securelayer7.net
Pre-auth RCE in TeamCity turns on an XStream allowlist miss, then chains agent polling, gadgets, and an HSQLDB file write.
commons-collections commons-dbcp2 deserialization exploitation freemarker hsql java patch-analysis rce supply-chain teamcity twitter vulnerability xstream
0 pts/proverbill/14 days ago/2 comments