---
title: "Atlassian: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/atlassian/
description: "Every Atlassian vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (5), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-10-15
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Atlassian: known exploited vulnerabilities

- 2026-10-15 [CVE-2026-21589](https://erroneo.us/security/cve/CVE-2026-21589/index.md) Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability (due 2026-10-18; ransomware: Unknown)
- 2024-11-12 [CVE-2021-26086](https://erroneo.us/security/cve/CVE-2021-26086/index.md) Atlassian Jira Server and Data Center: Atlassian Jira Server and Data Center Path Traversal Vulnerability (due 2024-12-03; ransomware: Unknown)
- 2024-01-24 [CVE-2023-22527](https://erroneo.us/security/cve/CVE-2023-22527/index.md) Atlassian Confluence Data Center and Server: Atlassian Confluence Data Center and Server Template Injection Vulnerability (due 2024-02-14; ransomware: Known)
- 2023-11-07 [CVE-2023-22518](https://erroneo.us/security/cve/CVE-2023-22518/index.md) Atlassian Confluence Data Center and Server: Atlassian Confluence Data Center and Server Improper Authorization Vulnerability (due 2023-11-28; ransomware: Known)
- 2023-10-05 [CVE-2023-22515](https://erroneo.us/security/cve/CVE-2023-22515/index.md) Atlassian Confluence Data Center and Server: Atlassian Confluence Data Center and Server Broken Access Control Vulnerability (due 2023-10-13; ransomware: Known)

---
Source page: https://erroneo.us/security/vendor/atlassian/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt