A
Üretici güvenlik profili13 aktif sömürülen CVE
Atlassian
Ürün portföyü, yama kanıtları ve sömürü sinyalleri tek güvenlik karnesinde
Veriler CVE Programı, NVD, CISA KEV ve üretici güvenlik bültenlerinden birleştirilir.
Toplam CVE37
Kritik1
CISA KEV13
Public exploit14
Yama oranı%0
Ort. CVSS6.3
12 aylık açık hızı
0
0
0
0
1
1
0
0
3
3
3
1
CVE KEV
CVE önem dağılımı
37toplam CVE
Kritik1 (3%)
Yüksek11 (30%)
Orta12 (32%)
Belirsiz13 (35%)
Yama ve sömürü görünümü
%0
Doğrulanmış yama
%35
CISA KEV
%38
Public exploit
0Yama var
0Kısmi
13Geçici çözüm
0Üretici: yama yok
24Bilinmiyor
Son güvenlik açıkları
9.3
CVE-2026-21589
Vulnerability in Atlassian Bamboo Data Center
A
Yama durumu bilinmiyorEPSS %2
7.4
CVE-2026-77246
MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path
S
Yama doğrulandıEPSS %0
8.6
CVE-2026-77248
MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport
S
Yama doğrulandıEPSS %0
8.3
CVE-2026-77256
MCP Atlassian: OAuth refresh-token backup file is world-readable under default Unix umask
S
Yama doğrulandıEPSS %0
5.3
CVE-2026-77249
MCP Atlassian: Incomplete fix for CVE-2026-27826: redirect-based SSRF via unhooked requests session in Jira user-permission lookup
S
Yama doğrulandıEPSS %0
7.7
CVE-2026-77259
MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials
S
Yama doğrulandıEPSS %0
5.5
CVE-2026-77268
MCP Atlassian: Insecure File Permissions on OAuth Token Storage
S
Yama doğrulandıEPSS %0
8.3
CVE-2026-77247
MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters
S
Yama doğrulandıEPSS %0
5.4
CVE-2026-77272
MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler
S
Yama doğrulandıEPSS %0
6.5
CVE-2026-77269
MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)
S
Yama doğrulandıEPSS %0