Critical Vulnerability in Multiple Atlassian Products

# Critical Vulnerability in Multiple Atlassian Products

https://gcdradar.vercel.app/incidents/critical-vulnerability-in-multiple-atlassian-products · AIR-2026-1570 · closed 2026-11-10

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability): Critical rating with a fix.
- Fix status: Patched
- First reported: 2026-10-27 (happened 2026-10-05)
- AI role: No AI role
- Products: Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible, Fisheye
- CVSS: 9

## Summary

Atlassian published a security advisory addressing a critical arbitrary file access vulnerability affecting multiple Data Center and server products. CERT-EU recommends upgrading all affected installations immediately.

## What to do

Upgrade all affected installations to a fixed version as soon as possible and check access logs for signs of exploitation.

## Affected and fixed versions

- Affected: Atlassian Data Center and Server products
- Fixed in: Latest patched versions

## Latest updates

- 2026-10-27: 2026-015: Critical Vulnerability in Multiple Atlassian Products (https://cert.europa.eu/publications/security-advisories/2026-015)

## Sources

- 2026-10-27 CERT-EU: 2026-015: Critical Vulnerability in Multiple Atlassian Products https://cert.europa.eu/publications/security-advisories/2026-015

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.