Atlassian: every exploited CVE on CISA KEV
All 14 Atlassian bugs attackers are confirmed to be using, with attack scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
14
Atlassian bugs on CISA’s exploited list
1 added in 2026.
8
are linked to ransomware
Every Atlassian vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-10-15 | CVE-2026-21589 | Atlassian Multiple Products | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | 0.99 | 0.99 | Nuclei · Suricata | No |
| 2024-11-12 | CVE-2021-26086 | Atlassian Jira Server and Data Center | Atlassian Jira Server and Data Center Path Traversal Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | No |
| 2024-01-24 | CVE-2023-22527 | Atlassian Confluence Data Center and Server | Atlassian Confluence Data Center and Server Template Injection Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | Yes |
| 2023-11-07 | CVE-2023-22518 | Atlassian Confluence Data Center and Server | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | Yes |
| 2023-10-05 | CVE-2023-22515 | Atlassian Confluence Data Center and Server | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | 0.99 | 0.99 | Nuclei · Suricata | Yes |
| 2022-09-30 | CVE-2022-36804 | Atlassian Bitbucket Server and Data Center | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | 0.99 | 0.99 | Nuclei · Suricata | No |
| 2022-07-29 | CVE-2022-26138 | Atlassian Confluence | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | 0.98 | 0.98 | Nuclei · Suricata | No |
| 2022-06-02 | CVE-2022-26134 | Atlassian Confluence Server/Data Center | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | Yes |
| 2022-03-28 | CVE-2021-26085 | Atlassian Confluence Server | Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | Yes |
| 2022-03-07 | CVE-2019-11581 | Atlassian Jira Server and Data Center | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability | 0.85 | 0.98 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2021-26084 | Atlassian Confluence Server and Data Center | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | Yes |
| 2021-11-03 | CVE-2019-3398 | Atlassian Confluence Server and Data Center | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | 0.97 | 0.99 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2019-3396 | Atlassian Confluence Server and Data Server | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | Yes |
| 2021-11-03 | CVE-2019-11580 | Atlassian Crowd and Crowd Data Center | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | 0.95 | 0.98 | Nuclei · Suricata | Yes |
Industry partners
