News stories · 30d
7
Advisories · 30d
0
Added to KEV · 90d
1
Actively exploited (CISA KEV)
| Added | CVE | Product | Vulnerability | Ransomware |
|---|---|---|---|---|
| 2026-10-15 | CVE-2026-21589 | Multiple Products | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | |
| 2024-11-12 | CVE-2021-26086 | Jira Server and Data Center | Atlassian Jira Server and Data Center Path Traversal Vulnerability | |
| 2024-01-24 | CVE-2023-22527 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Template Injection Vulnerability | Known |
| 2023-11-07 | CVE-2023-22518 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | Known |
| 2023-10-05 | CVE-2023-22515 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | Known |
| 2022-09-30 | CVE-2022-36804 | Bitbucket Server and Data Center | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | |
| 2022-07-29 | CVE-2022-26138 | Confluence | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | |
| 2022-06-02 | CVE-2022-26134 | Confluence Server/Data Center | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability | Known |
| 2022-03-28 | CVE-2021-26085 | Confluence Server | Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability | Known |
| 2022-03-07 | CVE-2019-11581 | Jira Server and Data Center | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability | |
| 2021-11-03 | CVE-2019-3398 | Confluence Server and Data Center | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | |
| 2021-11-03 | CVE-2021-26084 | Confluence Server and Data Center | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | Known |
| 2021-11-03 | CVE-2019-11580 | Crowd and Crowd Data Center | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | Known |
| 2021-11-03 | CVE-2019-3396 | Confluence Server and Data Server | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | Known |
CVEs in the news
Timeline (last 30 days)
- U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog — Security Affairs, 2026-10-16
- Critical Flaw in Multiple Atlassian Products Exploited in the Wild — Infosecurity Magazine, 2026-10-08
- Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589) — Help Net Security, 2026-10-07
- Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589) — Help Net Security, 2026-10-07
- Atlassian Patches Critical Vulnerability Affecting 8 Products — SecurityWeek, 2026-10-07
- Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589) — Help Net Security +2 sources, 2026-10-06
- Atlassian warns of critical file access flaw in its datacenter products — The Register +9 sources, 2026-10-06