# cve.now: Sooperset

The newest entries naming Sooperset as an affected vendor (up to 200), of 35 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-124503](https://cve.now/CVE-2026-124503.md): sooperset mcp-atlassian io.py validate\_safe\_path path traversal (CVSS 5.3)
- [CVE-2026-77246](https://cve.now/CVE-2026-77246.md): MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path (CVSS 7.4)
- [CVE-2026-77248](https://cve.now/CVE-2026-77248.md): MCP Atlassian: Unauthenticated arbitrary local file read via upload\_attachment file\_path, chained with missing auth on streamable-http transport (CVSS 8.6)
- [CVE-2026-77256](https://cve.now/CVE-2026-77256.md): MCP Atlassian: OAuth refresh-token backup file is world-readable under default Unix umask (CVSS 8.3)
- [CVE-2026-77249](https://cve.now/CVE-2026-77249.md): MCP Atlassian: Incomplete fix for CVE-2026-27826: redirect-based SSRF via unhooked requests session in Jira user-permission lookup (CVSS 5.3)
- [CVE-2026-77259](https://cve.now/CVE-2026-77259.md): MCP Atlassian: Arbitrary file read via confluence\_upload\_attachment allows exfiltration of server credentials (CVSS 7.7)
- [CVE-2026-77268](https://cve.now/CVE-2026-77268.md): MCP Atlassian: Insecure File Permissions on OAuth Token Storage (CVSS 5.5)
- [CVE-2026-77247](https://cve.now/CVE-2026-77247.md): MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file\_path parameters (CVSS 8.3)
- [CVE-2026-77272](https://cve.now/CVE-2026-77272.md): MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler (CVSS 5.4)
- [CVE-2026-77269](https://cve.now/CVE-2026-77269.md): MCP Atlassian: Path traversal in upload\_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825) (CVSS 6.5)
- [CVE-2026-77266](https://cve.now/CVE-2026-77266.md): MCP Atlassian: Path traversal in upload\_attachment allows arbitrary file read and exfiltration via MCP tool call (CVSS 6.5)
- [CVE-2026-77255](https://cve.now/CVE-2026-77255.md): MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update\_issue (CVSS 8.6)
- [CVE-2026-77262](https://cve.now/CVE-2026-77262.md): MCP Atlassian: Path Traversal / Arbitrary File Read in confluence\_upload\_attachment MCP tool (incomplete fix of CVE-2026-27825) (CVSS 8.6)
- [CVE-2026-77254](https://cve.now/CVE-2026-77254.md): MCP Atlassian: Unauthenticated HTTP MCP requests can use globally configured Jira and Confluence credentials (CVSS 9.1)
- [CVE-2026-77253](https://cve.now/CVE-2026-77253.md): MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files (CVSS 7.1)
- [CVE-2026-77257](https://cve.now/CVE-2026-77257.md): MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths (CVSS 8.3)
- [CVE-2026-77261](https://cve.now/CVE-2026-77261.md): MCP Atlassian: SSRF redirect protection missing for basic-auth and OAuth authentication branches (CVSS 7.1)
- [CVE-2026-77260](https://cve.now/CVE-2026-77260.md): MCP Atlassian: Arbitrary local file READ via unconstrained file\_path in upload\_attachment (Confluence + Jira) (CVSS 8.3)
- [CVE-2026-77271](https://cve.now/CVE-2026-77271.md): MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of CVE-2026-27825) (CVSS 8.3)
- [CVE-2026-77242](https://cve.now/CVE-2026-77242.md): MCP Atlassian: Incomplete fix for CVE-2026-27826: DNS rebinding bypasses SSRF validation (validated IP not pinned) (CVSS 7.5)
- [CVE-2026-77243](https://cve.now/CVE-2026-77243.md): MCP Atlassian: ENABLED\_TOOLS / Toolset authorization bypass (CVSS 8.8)
- [CVE-2026-77251](https://cve.now/CVE-2026-77251.md): MCP Atlassian: JIRA\_PROJECTS\_FILTER / CONFLUENCE\_SPACES\_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud) (CVSS 8.3)
- [CVE-2026-77252](https://cve.now/CVE-2026-77252.md): MCP Atlassian: JIRA\_PROJECTS\_FILTER and CONFLUENCE\_SPACES\_FILTER can be bypassed in search tools (CVSS 6.5)
- [CVE-2026-77267](https://cve.now/CVE-2026-77267.md): mcp-atlassian has an incomplete SSRF remediation (CVSS 8.3)
- [CVE-2026-77250](https://cve.now/CVE-2026-77250.md): MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions (CVSS 6.1)
- [CVE-2026-77244](https://cve.now/CVE-2026-77244.md): \[mcp-atlassian\] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token (CVSS 10.0)
- [CVE-2026-77265](https://cve.now/CVE-2026-77265.md): MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow (CVSS 5.9)
- [CVE-2026-77270](https://cve.now/CVE-2026-77270.md): MCP Atlassian: Arbitrary File Read via Upload Attachment Tools (CVSS 6.5)
- [CVE-2026-77258](https://cve.now/CVE-2026-77258.md): MCP Atlassian: Arbitrary file read/exfiltration via upload\_attachment missing validate\_safe\_path() (CVSS 7.7)
- [CVE-2026-77274](https://cve.now/CVE-2026-77274.md): MCP Atlassian: SSRF Protection Bypass (CVSS 8.8)
- [CVE-2026-73497](https://cve.now/CVE-2026-73497.md): MCP Atlassian is a Model Context Protocol (MCP): DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826): unauthenticated SSRF to cloud metadata (CVSS 6.5)
- [CVE-2026-73496](https://cve.now/CVE-2026-73496.md): MCP Atlassian: Arbitrary server-side file read via attachment upload (CVSS 7.7)
- [CVE-2026-73498](https://cve.now/CVE-2026-73498.md): MCP Atlassian is a Model Context Protocol (MCP): Arbitrary file read via missing path validation in confluence\_upload\_attachment (CVSS 7.7)
- [CVE-2026-27825](https://cve.now/CVE-2026-27825.md): MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download\_path in confluence\_download\_attachment (CVSS 9.1)
- [CVE-2026-27826](https://cve.now/CVE-2026-27826.md): MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers (CVSS 8.2)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/sooperset
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.