Vendor dossier / #19
Atlassian vulnerabilities in CISA KEV
Answer CISA's KEV catalog lists 14 Atlassian vulnerabilities as of catalog 2026.10.30, 0.8% of all 1,766 entries and rank 19 of 291 vendors. The first was added on 2021-11-03 and the most recent on 2026-10-15; 8 are flagged as used in ransomware campaigns.
- KEV entries
- 140.8% of catalog
- Last 90 days
- +1added
- Ransomware: known
- 857.1%
- Products
- 10distinct
- First added
- 2021-11-03
- Latest added
- 2026-10-15
- Median days to due
- 21
- Open deadlines
- 0federal
TAdditions per quarter
Table view (by year)
| Year | Added |
|---|---|
| 2021 | 4 |
| 2022 | 5 |
| 2023 | 2 |
| 2024 | 2 |
| 2025 | 0 |
| 2026 | 1 |
QCommon questions
How many Atlassian vulnerabilities are in CISA KEV?
14, as of KEV catalog 2026.10.30 (released 2026-10-30). That is 0.8% of the catalog.
Which Atlassian product has the most KEV entries?
Confluence Data Center and Server, with 3 entries. 10 products appear in total.
How many Atlassian KEV vulnerabilities are linked to ransomware?
8 of 14 (57.1%) are flagged by CISA as known to be used in ransomware campaigns.
When was the latest Atlassian vulnerability added to KEV?
2026-10-15 (CVE-2026-21589).
What is the most common weakness in Atlassian KEV entries?
CWE-22 (Path traversal), listed on 3 entries.
PProducts
| Product | Entries | Share of vendor |
|---|---|---|
| Confluence Data Center and Server | 3 | 21.4% |
| Jira Server and Data Center | 2 | 14.3% |
| Confluence Server and Data Center | 2 | 14.3% |
| Multiple Products | 1 | 7.1% |
| Bitbucket Server and Data Center | 1 | 7.1% |
| Confluence | 1 | 7.1% |
| Confluence Server/Data Center | 1 | 7.1% |
| Confluence Server | 1 | 7.1% |
| Confluence Server and Data Server | 1 | 7.1% |
| Crowd and Crowd Data Center | 1 | 7.1% |
WWeaknesses
| CWE | Entries | Share of vendor |
|---|---|---|
| CWE-22 Path traversal | 3 | 21.4% |
| CWE-74 Injection | 2 | 14.3% |
| CWE-917 | 2 | 14.3% |
| CWE-552 | 1 | 7.1% |
| CWE-863 Incorrect authorization | 1 | 7.1% |
| CWE-78 OS command injection | 1 | 7.1% |
| CWE-88 | 1 | 7.1% |
| CWE-158 | 1 | 7.1% |
| CWE-798 Hard-coded credentials | 1 | 7.1% |
| CWE-425 | 1 | 7.1% |
| No CWE listed | 2 | 14.3% |
EAll 14 entries
| CVE | Product | Vulnerability | Added | Due | Ransomware | CWE |
|---|---|---|---|---|---|---|
| CVE-2026-21589 | Multiple Products | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | Unknown | CWE-552 | ||
| CVE-2021-26086 | Jira Server and Data Center | Atlassian Jira Server and Data Center Path Traversal Vulnerability | Unknown | CWE-22 | ||
| CVE-2023-22527 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Template Injection Vulnerability | Known | CWE-74 | ||
| CVE-2023-22518 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | Known | CWE-863 | ||
| CVE-2023-22515 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | Known | none listed | ||
| CVE-2022-36804 | Bitbucket Server and Data Center | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | Unknown | CWE-78, CWE-88, CWE-158 | ||
| CVE-2022-26138 | Confluence | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | Unknown | CWE-798 | ||
| CVE-2022-26134 | Confluence Server/Data Center | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability | Known | CWE-917 | ||
| CVE-2021-26085 | Confluence Server | Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability | Known | CWE-425 | ||
| CVE-2019-11581 | Jira Server and Data Center | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability | Unknown | CWE-74 | ||
| CVE-2021-26084 | Confluence Server and Data Center | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | Known | CWE-917 | ||
| CVE-2019-3398 | Confluence Server and Data Center | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | Unknown | CWE-22 | ||
| CVE-2019-3396 | Confluence Server and Data Server | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | Known | CWE-22 | ||
| CVE-2019-11580 | Crowd and Crowd Data Center | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | Known | none listed |
Cite this
CISA's Known Exploited Vulnerabilities catalog lists 14 Atlassian vulnerabilities (0.8% of all entries). Source: KEV Now analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.10.30 (released 2026-10-30). https://kevnow.com/vendors/atlassian/
Source: CISA KEV catalog v2026.10.30, released 2026-10-30. Windows end 2026-10-30. Vendor names are CISA's vendorProject strings; KEV Now states no facts about Atlassian beyond this data.