Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 35 added in the last 30 days, latest on Nov 6, 2026.
14 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Oct 15, 2026 | CVE-2026-21589 | Atlassian · Multiple Products | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | Critical 9.3 | 99.7% | Oct 18, 2026 |
| Nov 12, 2024 | CVE-2021-26086 | Atlassian · Jira Server and Data Center | Atlassian Jira Server and Data Center Path Traversal Vulnerability | Medium 5.3 | 100.0% | Dec 3, 2024 |
| Jan 24, 2024 | CVE-2023-22527 Ransomware | Atlassian · Confluence Data Center and Server | Atlassian Confluence Data Center and Server Template Injection Vulnerability | Critical 10.0 | 100.0% | Feb 14, 2024 |
| Nov 7, 2023 | CVE-2023-22518 Ransomware | Atlassian · Confluence Data Center and Server | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | Critical 10.0 | 100.0% | Nov 28, 2023 |
| Oct 5, 2023 | CVE-2023-22515 Ransomware | Atlassian · Confluence Data Center and Server | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | Critical 10.0 | 99.2% | Oct 13, 2023 |
| Sep 30, 2022 | CVE-2022-36804 | Atlassian · Bitbucket Server and Data Center | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | High 8.8 | 99.1% | Oct 21, 2022 |
| Jul 29, 2022 | CVE-2022-26138 | Atlassian · Confluence | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | Critical 9.8 | 98.2% | Aug 19, 2022 |
| Jun 2, 2022 | CVE-2022-26134 Ransomware | Atlassian · Confluence Server/Data Center | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability | Critical 9.8 | 100.0% | Jun 6, 2022 |
| Mar 28, 2022 | CVE-2021-26085 Ransomware | Atlassian · Confluence Server | Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability | Medium 5.3 | 99.9% | Apr 18, 2022 |
| Mar 7, 2022 | CVE-2019-11581 | Atlassian · Jira Server and Data Center | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability | Critical 9.8 | 84.6% | Sep 7, 2022 |
| Nov 3, 2021 | CVE-2021-26084 Ransomware | Atlassian · Confluence Server and Data Center | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | Critical 9.8 | 100.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2019-3398 | Atlassian · Confluence Server and Data Center | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | High 8.8 | 97.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-3396 Ransomware | Atlassian · Confluence Server and Data Server | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | Critical 9.8 | 99.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-11580 Ransomware | Atlassian · Crowd and Crowd Data Center | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | Critical 9.8 | 95.4% | May 3, 2022 |