References https://github.com/advisories/GHSA-7r34-79r5-rcc9 https://www.sentinelone.com/vulnerability-database/cve-2026-27826/ https://pluto.security/blog/mcpwnfluence-cve-2026-27825-critical/ https://nvd.nist.gov/vuln/detail/CVE-2026-27826 https://arcticwolf.com/resources/blog-uk/cve-2026-27825-critical-unauthenticated-rce-and-ssrf-in-mcp-atlassian/ https://blog.pluto.security/p/mcpwnfluence-cve-2026-27825-critical https://www.miggo.io/vulnerability-database/cve/CVE-2026-27826 https://feedly.com/cve/CVE-2026-27826 https://raxe.ai/labs/advisories/RAXE-2026-034
Related VulnerabilitiesPoCCVE-2026-27826: mcp-atlassian < 0.17.0 - Server-Side Request ForgeryPoCconfluence-xslt-macro-ssrf: Atlassian Confluence XSLT Macro - Server-Side Request ForgeryPoCCVE-2017-5983: JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)Atlassian Jira Software Data Center And Server 需授权 路径遍历漏洞CVE-2019-3396: Atlassian Confluence Path TraversalAtlassian Confluence /json/setup-restore.action 文件上传漏洞(CVE-2023-22518)PoCCVE-2015-8399: Atlassian Confluence <5.8.17 - Information DisclosurePoCCVE-2017-9506: Atlassian Jira IconURIServlet - Cross-Site Scripting/Server-Side Request ForgeryPoCCVE-2018-20824: Atlassian Jira WallboardServlet <7.13.1 - Cross-Site ScriptingPoCCVE-2018-5230: Atlassian Jira Confluence - Cross-Site ScriptingPoCCVE-2019-11580: Atlassian Crowd and Crowd Data Center - Unauthenticated Remote Code Execution