Critical RCE Vulnerability Fixed in Atlassian Bamboo Data Center
Summary
CSIRT-ITA has issued an alert (AL02/260423/CSIRT-ITA) confirming that Atlassian has released security updates patching a critical Remote Code Execution vulnerability (CVE-2026-21571) in Bamboo Data Center. The vulnerability affects multiple versions across seven release branches (9.6.x through 12.1.x). System impact is rated High (65.89). Organizations running affected versions are advised to update immediately per Atlassian's security bulletins.
About this source
GovPing monitors Italy CSIRT Advisories for new data privacy & cybersecurity regulatory changes. Every update since tracking began is archived, classified, and available as free RSS or email alerts — 18 changes logged to date.
What changed
CSIRT-ITA has confirmed resolution of CVE-2026-21571, a critical Remote Code Execution vulnerability in Atlassian Bamboo Data Center. The vulnerability, if exploited, would have allowed a remote attacker to execute arbitrary code on affected systems. Security updates have been released for seven affected version branches: 9.6.x, 10.0.x, 10.1.x, 10.2.x, 11.0.x, 12.0.x, and 12.1.x. Specific patched versions include 9.6.24 (LTS), 10.0.3, 10.1.1, 10.2.16 (LTS), 11.0.8, 12.0.2, and 12.1.3 (LTS).
Organizations running any of the listed Bamboo Data Center versions should verify their current installation version and apply the relevant security update referenced in Atlassian's security bulletin and Jira ticket BAM-26364. System impact is assessed as High (65.89), indicating significant risk if left unpatched. This advisory applies to any entity operating Atlassian Bamboo Data Center within Italian jurisdiction or under CSIRT-ITA's advisory scope.
Archived snapshot
Apr 27, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
Risolta vulnerabilità in Atlassian Bamboo Data Center
**
Alert**
AL02/260423/CSIRT-ITA
Condividi
- Facebook
- Twitter
- LinkedIn
- Whatsapp
Sintesi
Rilasciati aggiornamenti di sicurezza per risolvere una vulnerabilità con gravità “critica” presente nel prodotto Bamboo Data Center di Atlassian. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato remoto di eseguire codice arbitrario sui sistemi interessati.
Tipologia
Remote Code Execution
Prodotti e/o versioni affette
Bamboo Data Center:
- 12.1.x, versione 12.1.3 (LTS) e precedenti
- 12.0.x, versione 12.0.2 e precedenti
- 11.0.x, versione 11.0.8 e precedenti
- 10.2.x, versione 10.2.16 (LTS) e precedenti
- 10.1.x, versione 10.1.1 e precedenti
- 10.0.x, versione 10.0.3 e precedenti
- 9.6.x, versione 9.6.24 (LTS) e precedenti
Azioni di mitigazione
In linea con le dichiarazioni del vendor, si raccomanda di aggiornare i prodotti vulnerabili seguendo le indicazioni dei bollettini di sicurezza riportati nella sezione Riferimenti.
CVE (1)
Cerca:
| CVE | POC | EXPLOITATION |
| --- | --- | --- |
| CVE-2026-21571 | - | - |
Riferimenti (2)
- https://confluence.atlassian.com/security/security-bulletin-april-21-2026-1770913890.html
- https://jira.atlassian.com/browse/BAM-26364
Change log
| Versione | Note | Data |
|---|---|---|
| 1.0 | Pubblicato il 23-04-2026 | 23/04/2026 |
Impatto sistemico
Alto (65.89)
Argomenti
Data pubblicazione
23/04/26 ore 10:58
Data Ultimo Aggiornamento
23/04/26 ore 10:58
Related changes
Get daily alerts for Italy CSIRT Advisories
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from CSIRT-ITA.
The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when Italy CSIRT Advisories publishes new changes.
Subscribed!
Optional. Filters your digest to exactly the updates that matter to you.