CVE Intel / CVE-2023-42793

CVE-2023-42793

teamcity · jetbrains
⚠
Actively exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue: exploitation confirmed in the wild. Patch on priority.
CISA KEVexploited on our sensorsCritical network detectablepublic exploit: ExploitDB, Metasploit

What it is

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

Live exploitation on the huntback network (30 days)

4
attempts captured
2
distinct source IPs
2026-09-15
last seen
huntback carries a network signature for this CVE. Exploitation attempts are detected on the decoy fleet in real time.

How huntback helps

Deploy a decoy that emulates teamcity and you will see every attempt at this CVE the moment it lands, with the full payload, the attacker's infrastructure, and any stage-2 loader. Then huntback can scan the attacker back.

CVSSn/a Critical
EPSS1.00 (99% pct)
In CISA KEVyes
Publishedn/a
Network detectableyes, signatured
Public exploitExploitDB, Metasploit