Security Digest
Atlassian: known exploited vulnerabilities
5 Atlassian CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-10-15 | CVE-2026-21589 | Atlassian Multiple Products Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | 2026-10-18 |
| 2024-11-12 | CVE-2021-26086 | Atlassian Jira Server and Data Center Atlassian Jira Server and Data Center Path Traversal Vulnerability | 2024-12-03 |
| 2024-01-24 | CVE-2023-22527 | Atlassian Confluence Data Center and Server Atlassian Confluence Data Center and Server Template Injection Vulnerability Ransomware | 2024-02-14 |
| 2023-11-07 | CVE-2023-22518 | Atlassian Confluence Data Center and Server Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Ransomware | 2023-11-28 |
| 2023-10-05 | CVE-2023-22515 | Atlassian Confluence Data Center and Server Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Ransomware | 2023-10-13 |