Atlassian security advisory (AV26-1076)

Serial number: AV26-1076
Date: October 22, 2026

As of October 20, 2026, Atlassian is affected by vulnerabilities in the following products:

  • Bamboo Data Center and Server
    • Version 12.1.12 and prior
    • Version 10.2.24 and prior
  • Bitbucket Data Center and Server
    • Version 10.2.8 and prior
    • Version 10.5.1 and prior
    • Version 9.4.26 and prior
  • Confluence Data Center and Server
    • Version 11.0.0 and prior
    • Version 10.2.19 and prior
    • Version 9.2.26 and prior
  • Crowd Data Center and Server
    • Version 7.2.4 and prior
  • Fisheye/Crucible
    • Version 4.9.15 and prior
  • Jira Service Management Data Center and Server
    • Version 10.3.26 and prior
    • Version 11.3.12 and prior
  • Jira Data Center and Server
    • Version 10.3.26 and prior
    • Version 11.3.12 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

Date modified: