Atlassian known exploited vulnerabilities
Every Atlassian CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 14 in all, 1 added in the last 12 months.
- CVE-2026-21589This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, BaAtlassian Bamboo Data Center · Atlassian Bitbucket Data… +6
- CVE-2021-26086Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerabilitAtlassian Jira Server · Atlassian Jira Data Center
- CVE-2023-22527A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE Atlassian Confluence Data Center · Atlassian Confluence Ser…
- CVE-2023-22518All versions of Confluence Data Center and Server are affected by this unexploited vulnerability.Atlassian Confluence Data Center · Atlassian Confluence Ser…
- CVE-2023-22515Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknowAtlassian Confluence Data Center · Atlassian Confluence Ser…
- CVE-2022-36804Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10,Atlassian Bitbucket Server · Atlassian Bitbucket Data Center
- CVE-2022-26138The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users gAtlassian Questions For Confluence
- CVE-2022-26134In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attackAtlassian Confluence Data Center · Atlassian Confluence Ser…
- CVE-2021-26085Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Atlassian Confluence Server · Atlassian Confluence Data Cen…
- CVE-2019-11581There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail aAtlassian Jira Server and Data Center
- CVE-2021-26084In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attackAtlassian Confluence Server · Atlassian Confluence Data Cen…
- CVE-2019-3398Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource.Atlassian Confluence
- CVE-2019-3396The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.1Atlassian Confluence Server
- CVE-2019-11580Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds.Atlassian Crowd
Get alerts for new known exploited vulnerabilities
Only want the packages you use? Check a lockfile to get a feed for your stack.
https://cve.now/kev/feed
Paste into Feedly or any RSS reader, or run /feed subscribe https://cve.now/kev/feed in Slack. For email alerts, give it to an RSS-to-email service.
https://cve.now/kev/feed?format=atom
The same entries as Atom, for readers that prefer it.
https://cve.now/kev/feed?format=json
The same entries as JSON Feed 1.1, for scripts and readers that support it.
https://cve.now/api/v1/entries?filter=kev
Pages of 30 entries, newest first. Pass the response's next_cursor as cursor for the next page.
Frequently asked questions
How many Atlassian vulnerabilities are in CISA KEV?
14 Atlassian vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 1 of them added in the last 12 months. The newest is CVE-2026-21589 (Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability), added 2026-10-15.
Which Atlassian products are in CISA KEV?
10 products, including Multiple Products, Jira Server and Data Center, Confluence Data Center and Server. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Atlassian KEV vulnerabilities used by ransomware?
CISA knows ransomware campaigns exploit 8 of the 14 Atlassian entries.