pwn.watch: Atlassian incident updates https://pwn.watch/t/atlassian Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:42:01 GMT [high] Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability: CISA added CVE-2026-21589 to the KEV catalog (due 2026-10-18). https://pwn.watch/i/atlassian-multiple-products-cve-2026-21589 atlassian-multiple-products-cve-2026-21589:2026-10-15:CISA added CVE-2026-21589 to the KEV catalog (due 2026-10-18). Thu, 15 Oct 2026 00:00:00 GMT high Status: live, patched [medium] Atlassian Jira Server and Data Center Path Traversal: CISA added CVE-2021-26086 to the KEV catalog (federal deadline 2024-12-03) https://pwn.watch/i/atlassian-jira-server-and-data-center-cve-2021-26086 atlassian-jira-server-and-data-center-cve-2021-26086:2024-11-12:CISA added CVE-2021-26086 to the KEV catalog (federal deadline 2024-12-03) Tue, 12 Nov 2024 00:00:00 GMT medium Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [high] Cloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breach: Cloudflare publishes its full write-up https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion cloudflare-thanksgiving-2023-okta-token-intrusion:2024-02-01:Cloudflare publishes its full write-up Thu, 01 Feb 2024 00:00:00 GMT high Source: https://blog.cloudflare.com/thanksgiving-2023-security-incident Status: closed, no-fix-needed [critical] Atlassian Confluence Data Center and Server Template Injection: CISA added CVE-2023-22527 to the KEV catalog (federal deadline 2024-02-14) https://pwn.watch/i/atlassian-confluence-data-center-and-server-cve-2023-22527 atlassian-confluence-data-center-and-server-cve-2023-22527:2024-01-24:CISA added CVE-2023-22527 to the KEV catalog (federal deadline 2024-02-14) Wed, 24 Jan 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Atlassian Confluence Data Center and Server Template Injection: CVE-2023-22527 published https://pwn.watch/i/atlassian-confluence-data-center-and-server-cve-2023-22527 atlassian-confluence-data-center-and-server-cve-2023-22527:2024-01-16:CVE-2023-22527 published Tue, 16 Jan 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2023-22527 Status: closed, patched [high] Cloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breach: Cloudflare detects the attacker on its self-hosted Atlassian server https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion cloudflare-thanksgiving-2023-okta-token-intrusion:2023-11-23:Cloudflare detects the attacker on its self-hosted Atlassian server Thu, 23 Nov 2023 00:00:00 GMT high Source: https://blog.cloudflare.com/thanksgiving-2023-security-incident Status: closed, no-fix-needed [high] Cloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breach: Attacker begins reconnaissance with credentials from the Okta compromise https://pwn.watch/i/cloudflare-thanksgiving-2023-okta-token-intrusion cloudflare-thanksgiving-2023-okta-token-intrusion:2023-11-14:Attacker begins reconnaissance with credentials from the Okta compromise Tue, 14 Nov 2023 00:00:00 GMT high Source: https://blog.cloudflare.com/thanksgiving-2023-security-incident Status: closed, no-fix-needed [critical] Confluence Data Center/Server reset-and-takeover bug exploited for Cerber ransomware (CVE-2023-22518): CISA adds CVE-2023-22518 to the KEV catalog https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518 atlassian-confluence-improper-authorization-cve-2023-22518:2023-11-07:CISA adds CVE-2023-22518 to the KEV catalog Tue, 07 Nov 2023 00:00:00 GMT critical Status: closed, patched [critical] Confluence Data Center/Server reset-and-takeover bug exploited for Cerber ransomware (CVE-2023-22518): Atlassian raises the CVSS score to 10 after active exploitation and Cerber ransomware deployments https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518 atlassian-confluence-improper-authorization-cve-2023-22518:2023-11-06:Atlassian raises the CVSS score to 10 after active exploitation and Cerber ransomware deployments Mon, 06 Nov 2023 00:00:00 GMT critical Status: closed, patched [critical] Confluence Data Center/Server reset-and-takeover bug exploited for Cerber ransomware (CVE-2023-22518): Atlassian discloses CVE-2023-22518 and ships fixes https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518 atlassian-confluence-improper-authorization-cve-2023-22518:2023-10-31:Atlassian discloses CVE-2023-22518 and ships fixes Tue, 31 Oct 2023 00:00:00 GMT critical Source: https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html Status: closed, patched [critical] Confluence Data Center/Server zero-day lets attackers create admins (CVE-2023-22515): CISA, FBI and MS-ISAC joint advisory AA23-289A on active exploitation https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515 atlassian-confluence-admin-creation-cve-2023-22515:2023-10-16:CISA, FBI and MS-ISAC joint advisory AA23-289A on active exploitation Mon, 16 Oct 2023 00:00:00 GMT critical Source: https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-289a Status: closed, patched [critical] Confluence Data Center/Server zero-day lets attackers create admins (CVE-2023-22515): CISA adds CVE-2023-22515 to the KEV catalog https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515 atlassian-confluence-admin-creation-cve-2023-22515:2023-10-05:CISA adds CVE-2023-22515 to the KEV catalog Thu, 05 Oct 2023 00:00:00 GMT critical Status: closed, patched [critical] Confluence Data Center/Server zero-day lets attackers create admins (CVE-2023-22515): Atlassian discloses the zero-day after customer reports and ships fixes https://pwn.watch/i/atlassian-confluence-admin-creation-cve-2023-22515 atlassian-confluence-admin-creation-cve-2023-22515:2023-10-04:Atlassian discloses the zero-day after customer reports and ships fixes Wed, 04 Oct 2023 00:00:00 GMT critical Source: https://confluence.atlassian.com/security/cve-2023-22515-broken-access-control-vulnerability-in-confluence-data-center-and-server-1295682276.html Status: closed, patched