EUVD-2026-46327

This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to cause a resource...

CVE-2026-21577

This CVE affects Confluence Data Center, introduced in versions 9.0.1–10.2.0. It is a High severity DoS (CVSS 7.1) that an authenticated attacker can use to make a resource unavailable by disrupting network-connected services. Upgrades are recommended: move to Confluence Data Center 9.2.17 or new...

CVE-2026-21579

CVE-2026-21579 affects Atlassian Confluence Data Center and is a High severity information disclosure vulnerability. It was introduced in multiple releases (7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0, 10.2.0). An unauthenticated attacker could view sensitive information via...

PT-2026-62000

Name of the Vulnerable Software and Affected Versions Confluence Data Center versions 7.17.0 Confluence Data Center version 7.19.0 Confluence Data Center version 8.5.0 Confluence Data Center version 8.9.0 Confluence Data Center version 9.0.1 Confluence Data Center version 9.1.0 Confluence Data...

SSRF (Server-Side Request Forgery) axios Dependency in Confluence Data Center

This is a vulnerability in a non-Atlassian Confluence dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity SSRF Server-Side Request Forgery vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1...

CVE-2026-9734

The W3SC Elementor to Zoho CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the storeInfo function. This makes it possible for unauthenticated attackers to modify the plugin's...

Race condition Apache Kafka Dependency in Bitbucket Data Center

This High severity Race condition vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bitbucket Data Center. This Race condition vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N allows an...

Cryptographic Failure org.bouncycastle:bcprov-jdk18on Dependency in Bitbucket Data Center

This High severity org.bouncycastle:bcprov-jdk18on Dependency vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0 of Bitbucket Data Center and Server. This Cryptographic Failure vulnerability, with a CVSS Score of 8.9 and a CVSS Vector of code:java...

HTTP Request Smuggling io.netty:netty-codec-http Dependency in Bitbucket Data Center

This High severity io.netty:netty-codec-http Dependency vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 10.0.0, 10.1.1, 10.2.0, 10.3.0 of Bitbucket Data Center and Server. This HTTP Request Smuggling vulnerability, with a CVSS Score of 7.5 and a CVSS...

RCE (Remote Code Execution) at 'getobject' version in Bitbucket Data Center

This is a vulnerability in a non-Atlassian Bitbucket dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity RCE Remote Code Execution vulnerability was introduced in version 10.3.0 of Bitbucket Data Center. This RCE Remote Code...

RCE (Remote Code Execution) grunt Dependency in Bitbucket Data Center

This High severity RCE Remote Code Execution vulnerability was introduced in version 10.3.0 of Bitbucket Data Center. This Remote Code Execution vulnerability, with a CVSS Score of 7.1 and a CVSS Vector of CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H allows an unauthenticated attacker to expose...

Race condition grunt Dependency in Bitbucket Data Center

This High severity Race condition vulnerability was introduced in version 10.3.0 of Bitbucket Data Center. This Race condition vulnerability, with a CVSS Score of 7 and a CVSS Vector of CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H allows an authenticated attacker to modify code sequences in which...

DoS (Denial of Service) minimatch Dependency in Bitbucket Data Center

This High severity DoS Denial of Service vulnerability was introduced in version 10.3.0 of Bitbucket Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to cause a...

RCE (Remote Code Execution) underscore Dependency in Bitbucket Data Center

This High severity RCE Remote Code Execution vulnerability was introduced in version 10.3.0 of Bitbucket Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 7.2 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H allows an authenticated attacker to execut...

DoS (Denial of Service) with Netty Dependency in Bitbucket Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 10.0.0, 10.1.1, 10.2.0, and 10.3.0 of Bitbucket Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

File Inclusion fast-uri Dependency in Bitbucket Data Center

This High severity File Inclusion vulnerability was introduced in versions 9.4.12, 10.0.1, and 10.1.1 of Bitbucket Data Center. This File Inclusion vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N allows an unauthenticated attacker to get t...

Injection fast-uri Dependency in Bitbucket Data Center

This High severity Injection vulnerability was introduced in versions 9.4.12, 10.0.1, and 10.1.1 of Bitbucket Data Center. This Injection vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N allows an unauthenticated attacker to modify the...

DoS (Denial of Service) org.bouncycastle:bcpg-lts8on Dependency in Bitbucket Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bitbucket Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

HTTP Request Smuggling io.netty:netty-codec-http Dependency in Bitbucket Data Center

This High severity io.netty:netty-codec-http Dependency vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 10.0.0, 10.1.1, 10.2.0, 10.3.0 of Bitbucket Data Center and Server. This HTTP Request Smuggling vulnerability, with a CVSS Score of 7.5 and a CVSS...

RCE (Remote Code Execution) ws Dependency in Bitbucket Data Center

This High severity RCE Remote Code Execution vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.5, 10.0.0, 10.1.1, 10.2.0, and 10.3.0 of Bitbucket Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...