Oct 19, 2026 · 17:37 UTC SEARCH
UNRATED KNOWN EXPLOITED RANSOMWARE USE
Vulnerability intelligence

CVE-2024-27199

VendorJetBrains
ProductTeamCity
Known exploitedYes
Added to CISA KEVApril 20, 2026
KEV due dateMay 4, 2026
Known ransomware useKnown

JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA KEV status

This vulnerability is listed in CISA’s Known Exploited Vulnerabilities Catalog. Known ransomware campaign use: Known.

Stay Ahead of the Threat Landscape

Breach intelligence, vulnerability alerts, and original analysis — delivered as it happens.