Products: 2
Vulnerabilities: 34
Known Exploited: 0
3
Critical Level Threats
16
High Level Threats
15
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-77246
MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path
Last Modified: Sep 28, 2026
Published: Sep 22, 2026
CVE-2026-77248
MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport
Last Modified: Sep 28, 2026
Published: Sep 22, 2026
CVE-2026-77256
MCP Atlassian: OAuth refresh-token backup file is world-readable under default Unix umask
Last Modified: Sep 28, 2026
Published: Sep 22, 2026
CVE-2026-77249
MCP Atlassian: Incomplete fix for CVE-2026-27826: redirect-based SSRF via unhooked requests session in Jira user-permission lookup
Last Modified: Sep 29, 2026
Published: Sep 22, 2026
CVE-2026-77259
MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials
Last Modified: Sep 29, 2026
Published: Sep 22, 2026
Items Per Page
