CYBERSIXT Signal Over Noise
securityonline.info 8/19/2026, 10:22:59 AM · external

Atlassian fixes XSS, impersonation bugs in Confluence, Jira

Atlassian fixes XSS, impersonation bugs in Confluence, Jira
CyberSIXT Evidence Panel
CVE Intel
CVE-2026-21580 - NVD Not in KEV 8.6 HIGH Patch Unknown
CVE-2026-21582 - NVD Not in KEV 8.8 HIGH Patch Unknown
CISA KEV Not in KEV
Patch Patch Status Unknown

ATLASSIAN has addressed two high-severity vulnerabilities in its self-hosted products. The first, CVE-2026-21580, is a stored XSS vulnerability in Confluence, scoring a CVSS of 9.3, allowing unauthenticated attackers to execute code in users' browsers, potentially leading to privilege escalation. The second flaw, CVE-2026-21582, impacts Jira Service Management with a score of 8.8, allowing unauthenticated users to impersonate others. Both vulnerabilities have patches available, and Atlassian has reported no confirmed exploitations in the wild.

View full article

Article by CyberSIXT