Atlassian
In 9 briefs, most recently 23 October 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
14 Atlassian vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 8 of them used in ransomware campaigns. Most recent:
- CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability
- CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability
- CVE-2023-22518 Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
- CVE-2023-22515 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
- CVE-2022-36804 Atlassian Bitbucket Server and Data Center Command Injection Vulnerability
- CVE-2022-26138 Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability
- CVE-2022-26134 Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
Coverage in DanSec Daily
- Capcom ID breach of 11.7M accounts, LiteLLM PyPI supply chain attack, and actively exploited Arista VeloCloud zero-day.
- The ASOS breach, Google domain hijacking via .gh/.sl/.as registries, FortiBleed attacks on Fortinet FortiGate, and Atlassian CVE-2026-21589 exploitation.
- ASOS data breach, actively exploited Atlassian Data Center flaw, and FortiBleed Fortinet credential harvesting.
- The Denmark Central Population Register breach affecting 8.8 million people, the FBI Accenture contractor ShinyHunters breach, and Atlassian Data Center …
- ClarityCheck leaks 9M face images, Operation CameraSwarm hijacks 14,000 Dahua cameras, and GitLab flaw CVE-2026-19478 is exploited.
- TrueConf breach pushes trojanized installers via Head Mare; Atlassian Rovo "RovoBlast" one-click flaw exposes Jira, Confluence and SharePoint data.
- Klue OAuth breach exposed Salesforce data, FortiBleed leaked ~74,000 Fortinet credentials, and law enforcement disrupted the SocGholish botnet.
- Under Armour ransomware breach, Fortinet FortiGate attacks, and Osiris ransomware hitting a Southeast Asian food franchisee, plus SmarterMail and Cisco …
- SoundCloud breach and VPN disruption, Askul ransomware exposing 740,000 records, and ShinyHunters extorting PornHub over Mixpanel-linked data theft.