Atlassian Jira Multiple Vulnerabilities

CERT-Bund has released Security Advisory WID-SEC-2026-0770 concerning multiple vulnerabilities in Atlassian Jira Data Center and Server products. The vulnerabilities, rated with a CVSS base score of 7.2 (high) and a temporal score of 6.3 (medium), allow for remote attacks. Affected versions include Atlassian Jira Data Center and Server versions prior to 11.3.3 and 10.3.18, and Jira Service Management Data Center and Server versions prior to 11.3.3 and 10.3.18.

Exploitation of these vulnerabilities could lead to arbitrary code execution, data manipulation and disclosure, cross-site scripting (XSS) attacks, or denial-of-service (DoS) conditions. Organizations using affected Jira instances should review the advisory and implement the recommended mitigations to protect their systems and data. The advisory indicates that mitigations are available, but specific details on patching or workarounds are not provided in this summary.