Canadian Centre for Cyber Security cyber.gc.ca

Atlassian security advisory (AV26-1076)

Imported from official source

October 22, 2026 15:54

Cybersecurity Classified by Officially

Serial number: AV26-1076
Date: October 22, 2026

As of October 20, 2026, Atlassian is affected by vulnerabilities in the following products:

Bamboo Data Center and Server
- Version 12.1.12 and prior
- Version 10.2.24 and prior
Bitbucket Data Center and Server
- Version 10.2.8 and prior
- Version 10.5.1 and prior
- Version 9.4.26 and prior
Confluence Data Center and Server
- Version 11.0.0 and prior
- Version 10.2.19 and prior
- Version 9.2.26 and prior
Crowd Data Center and Server
- Version 7.2.4 and prior
Fisheye/Crucible
- Version 4.9.15 and prior
Jira Service Management Data Center and Server
- Version 10.3.26 and prior
- Version 11.3.12 and prior
Jira Data Center and Server
- Version 10.3.26 and prior
- Version 11.3.12 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

This is an extract. The publication continues at the source.

Source: Canadian Centre for Cyber Security. Licence

Read the original at the source: https://cyber.gc.ca/en/alerts-advisories/atlassian-security-advisory-av26-1076

Officially imported this from Canadian Centre for Cyber Security’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization: Canadian Centre for Cyber Security — imported from official source
Official source: https://www.cyber.gc.ca/api/cccs/rss/v1/get?feed=alerts_advisories&lang=en ATOM
Imported: October 22, 2026 16:00
Versions: 1 recorded
Identity: https://cyber.gc.ca/en/alerts-advisories/atlassian-security-advisory-av26-1076