Email, files and business apps

Atlassian (Jira, Confluence) security incident history

Updated Oct 26, 2026. Data gathered daily from official public sources.

As of Oct 26, 2026, Vendor History found 14 actively exploited security flaws for Atlassian (Jira, Confluence), dated Nov 3, 2021 to Oct 15, 2026. Sources checked: the California and Washington Attorney General breach lists, SEC EDGAR (Form 8-K, Item 1.05) and CISA's Known Exploited Vulnerabilities catalog.

Breach notices and SEC cyber filings

None found in the sources we check.

Got a breach letter from Atlassian (Jira, Confluence)? What to do when a vendor has a data breach.

Actively exploited security flaws

Flaws in Atlassian (Jira, Confluence) products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.

1. Oct 15, 2026Exploited flaw

   Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability (CVE-2026-21589). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

2. Nov 12, 2024Exploited flaw

   Atlassian Jira Server and Data Center Path Traversal Vulnerability (CVE-2021-26086). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

3. Jan 24, 2024Exploited flaw

   Atlassian Confluence Data Center and Server Template Injection Vulnerability (CVE-2023-22527). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

   Source: CISA Known Exploited Vulnerabilities catalog

4. Nov 7, 2023Exploited flaw

   Atlassian Confluence Data Center and Server Improper Authorization Vulnerability (CVE-2023-22518). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

   Source: CISA Known Exploited Vulnerabilities catalog

5. Oct 5, 2023Exploited flaw

   Atlassian Confluence Data Center and Server Broken Access Control Vulnerability (CVE-2023-22515). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

   Source: CISA Known Exploited Vulnerabilities catalog

6. Sep 30, 2022Exploited flaw

   Atlassian Bitbucket Server and Data Center Command Injection Vulnerability (CVE-2022-36804). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

7. Jul 29, 2022Exploited flaw

   Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability (CVE-2022-26138). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

8. Jun 2, 2022Exploited flaw

   Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability (CVE-2022-26134). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

   Source: CISA Known Exploited Vulnerabilities catalog

9. Mar 28, 2022Exploited flaw

   Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability (CVE-2021-26085). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

   Source: CISA Known Exploited Vulnerabilities catalog

10. Mar 7, 2022Exploited flaw

    Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability (CVE-2019-11581). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

11. Nov 3, 2021Exploited flaw

    Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability (CVE-2019-11580). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

12. Nov 3, 2021Exploited flaw

    Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability (CVE-2019-3396). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

13. Nov 3, 2021Exploited flaw

    Atlassian Confluence Server and Data Center Path Traversal Vulnerability (CVE-2019-3398). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

14. Nov 3, 2021Exploited flaw

    Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability (CVE-2021-26084). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works

To cite: Vendor History, "Atlassian (Jira, Confluence) security incident history," vendorhistory.com/vendor/atlassian, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.