Atlassian, GitLab, Zoom Release Security Patches

Atlassian, GitLab, and Zoom have released security patches addressing more than two dozen vulnerabilities across their products, with updates covering Atlassian’s Bamboo, Bitbucket, Confluence, Crowd, and Jira.

The SecurityWeek report notes 32 patches for critical- and high-severity flaws, most of which affect third‑party dependencies, and that three bugs date back to 2021 and 2022; according to Atlassian’s advisories, two are critical defects in Bamboo and Confluence Data Center and Server (CVE-2025-12383 and CVE-2025-66516). The bulletin also lists CVE-2026-21569, an XXE injection in Crowd Data Center and Server.

GitLab released CE/EE versions 18.8.2, 18.7.2, and 18.6.4 with fixes for five vulnerabilities, including high-severity issues CVE-2025-13927, CVE-2025-13928, and CVE-2026-0723. Zoom announced fixes for a critical-severity command injection in Node Multimedia Routers (MMRs), tracked as CVE-2026-22844 (CVSS 9.9), with remediation in Node Meetings Hybrid MMR and Node Meeting Connector MMR version 5.2.1716.0; users are advised to review the security bulletins and update their instances as soon as possible.