CVE Watch—

CVE-2021-26086

Atlassian Jira Server and Data Center Path Traversal Vulnerability

CVSS

—

No CVSS

EPSS

100.0%

p100

KEV

YES

Nov 12, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

100.0%EPSS · 30 days100.0%

2026-09-162026-10-14

KEV catalog record

Product

Atlassian / Jira Server and Data Center

Vulnerability

Atlassian Jira Server and Data Center Path Traversal Vulnerability

Added to KEV

Nov 12, 2024

Remediate by

Dec 3, 2024

Known ransomware use

Summary description

Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /WEB-INF/web.xml endpoint.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://jira.atlassian.com/browse/JRASERVER-72695 ; https://nvd.nist.gov/vuln/detail/CVE-2021-26086

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2019-11581—

99.7%

KEV—80Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability—