Sooperset vulnerabilities
35 CVEs and advisories name Sooperset as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-73497MCP Atlassian is a Model Context Protocol (MCP): DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826): unauthenticated SSRF to cloud metadata
- CVE-2026-73496MCP Atlassian: Arbitrary server-side file read via attachment upload
- CVE-2026-73498MCP Atlassian is a Model Context Protocol (MCP): Arbitrary file read via missing path validation in confluence_upload_attachment
- CVE-2026-27825MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment
- CVE-2026-27826MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers