Canada flags Atlassian Data Center and Server flaws (AV26-1076)
Original title: Atlassian security advisory (AV26-1076)
The October 22 alert lists affected Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira, and Jira Service Management builds.
The Canadian Centre for Cyber Security issued advisory AV26-1076 on October 22, 2026. As of October 20, 2026, Atlassian reports vulnerabilities in listed Data Center and Server releases of Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira Service Management, and Jira. The centre tells administrators to review Atlassian's October 20, 2026 security bulletin and apply updates as they become available. No CVE identifiers or exploitation status appear in the alert.
Unconfirmed: The alert does not name CVE identifiers, severity, or whether the flaws are exploited.
- Bamboo is affected in 12.1.12 and prior and 10.2.24 and prior.
- Bitbucket is affected in 10.2.8, 10.5.1, and 9.4.26 and prior.
- Confluence is affected in 11.0.0, 10.2.19, and 9.2.26 and prior.
- Crowd 7.2.4 and prior and Fisheye/Crucible 4.9.15 and prior are listed.
- Jira and Jira Service Management are affected in 10.3.26 and 11.3.12 and prior.
| Product | Affected |
|---|---|
| Atlassian Bamboo Data Center and Server | 12.1.12 and prior; 10.2.24 and prior |
| Atlassian Bitbucket Data Center and Server | 10.2.8 and prior; 10.5.1 and prior; 9.4.26 and prior |
| Atlassian Confluence Data Center and Server | 11.0.0 and prior; 10.2.19 and prior; 9.2.26 and prior |
| Atlassian Crowd Data Center and Server | 7.2.4 and prior |
| Atlassian Fisheye/Crucible | 4.9.15 and prior |
| Atlassian Jira Service Management Data Center and Server | 10.3.26 and prior; 11.3.12 and prior |
| Atlassian Jira Data Center and Server | 10.3.26 and prior; 11.3.12 and prior |
- 1.Review Atlassian's October 20, 2026 security bulletin.
- 2.Apply any necessary Atlassian updates as they become available.
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1076 Date: October 22, 2026 As of October 20, 2026, Atlassian is affected by vulnerabilities in the following products: Bamboo Data Center and Server Version 12. 1. 12 and prior Version 10.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.