Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

6 matching records, 1 with confirmed exploitation.

1. 90
   KEV NVD 26d ago

   Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

   Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or…

   KEV · due 18 Oct 2026 (overdue) EPSS 0.99 Fix available CVE-2026-21589 Atlassian Collaboration
2. 26
   CVE NVD 25d ago

   Backstage is an open framework for building developer portals.

   Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the…

   CVSS 8.5 Fix available CVE-2026-106486 Atlassian Developer platform
3. 21
   CVE NVD 8d ago

   Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for…

   Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projects

   CVSS 7.1 CVE-2026-115975 Atlassian Collaboration
4. 20
   CVE NVD 24d ago

   Backstage is an open framework for building developer portals.

   Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder…

   CVSS 7.1 Fix available CVE-2026-106560 Atlassian Collaboration
5. 19
   CVE NVD 24d ago

   Backstage is an open framework for building developer portals.

   Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper input validation in confluence to markdown…

   CVSS 6.3 Fix available CVE-2026-106559 Atlassian Collaboration
6. 14
   CVE NVD 25d ago

   Backstage is an open framework for building developer portals.

   Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsistent repository filtering in bitbucket server…

   CVSS 6.5 CVE-2026-106458 Atlassian Developer platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Atlassian&limit=100. RSS for this section: feed.xml.