Serial number: AV26-1076 Date: October 22, 2026 As of October 20, 2026, Atlassian is affected by vulnerabilities in the following products: Bamboo Data Center and Server Version 12.1.12 and prior Version 10.2.24 and prior Bitbucket Data Center and Server Version 10.2.8 and prior Version 10.5.1 and prior Version 9.4.26 and prior Confluence Data Center and Server Version 11.0.0 and prior Version 10.2.19 and prior Version 9.2.26 and prior Crowd Data Center and Server Version 7.2.4 and prior…
CISA added CVE-2026-21589 to the Known Exploited Vulnerabilities catalog. Affected product: Atlassian Multiple Products. Remediation due date: 2026-10-18.
For the latest discoveries in cyber research for the week of 12th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Denmark’s government has disclosed a breach involving its Central Register of Persons after unauthorized individuals exploited access provided to a private supplier. The incident reportedly exposed personal information, including names, addresses, and identification numbers, associated with approximately 8.8 million individuals in the national…
On 5 October 2026, Atlassian published a security advisory addressing a critical arbitrary file access vulnerability. It affects Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye. CERT-EU strongly recommends upgrading all affected installations to a fixed version as soon as possible, starting with instances accessible from the internet. CERT-EU also recommends checking access…
De kwetsbaarheid bevindt zich in meerdere producten binnen het Atlassian Data Center-platform, waaronder Jira Software, Jira Service Management, Confluence, Bitbucket, Bamboo, Crowd, Crucible en Fisheye. De kwetsbaarheid betreft een Arbitrary File Access-probleem waarmee ongeauthenticeerde aanvallers specifieke bestanden binnen de rootdirectory van de webapplicatie kunnen benaderen. Exploitatie vereist kennis van het exacte bestandspad en de bestandsnaam. Hierdoor kunnen mogelijk gevoelige…
De multiples vulnérabilités ont été découvertes dans les produits Atlassian. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données.
Aggiornamenti di sicurezza Atlassian sanano alcune vulnerabilità, di cui una con gravità "alta", che interessano il prodotto Crowd Data Center. Tale vulnerabilità, qualora sfruttata, potrebbe consentire, a un utente malintenzionato non autenticato, di eludere i meccanismi di autenticazione e ottenere accesso a funzionalità o risorse riservate sui sistemi interessati.
Atlassian heeft kwetsbaarheden verholpen in diverse producten zoals Bamboo, Bitbucket, Confluence, Jira, Crowd en Fisheye. De kwetsbaarheden bevinden zich in diverse Third-Party producten waar eerder updates voor zijn verschenen. Atlassian heeft deze updates verwerkt in de eigen producten. Kwaadwillenden kunnen de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken, willekeurige code uit te voeren middels het injecteren van scripts of malafide SQL-quieries en/of gegevens te…
Serial Number: AV26-829Date: August 19, 2026 As of August 18, 2026, Atlassian is affected by vulnerabilities in the following products: Bamboo Data Center and Server multiple versions Bitbucket Data Center and Server multiple versions Confluence Data Center and Server multiple versions Crowd Data Center and Server multiple versions Fisheye/Crucible all versions from 4.9.0 to 4.9.12 Jira Data Center and Server multiple versions Jira Service Management Data Center and Server multiple versions The…