Product by Sooperset

    Mcp-atlassian

    34 known vulnerabilities in Mcp-atlassian (Sooperset), 0 of them actively exploited (CISA KEV).

    Key figures

    34

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Mcp-atlassian (Sooperset)
    CriticalCVE-2026-27825

    Sooperset Mcp-atlassian: Path Traversal

    also in 1 other product

    		9.1
    HighCVE-2026-27826

    MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers

    		8.2
    CriticalCVE-2026-77254

    Sooperset Mcp-atlassian: Missing Authentication for Critical Function

    also in 1 other product

    		9.1
    HighCVE-2026-77271

    Sooperset Mcp-atlassian: Path Traversal

    also in 1 other product

    		8.8
    HighCVE-2026-77262

    Sooperset Mcp-atlassian: Path Traversal

    also in 1 other product

    		8.6
    HighCVE-2026-77243

    MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass

    also in 1 other product

    		8.8
    HighCVE-2026-77248

    Sooperset Mcp-atlassian: Path Traversal

    also in 1 other product

    		8.6
    CriticalCVE-2026-77244

    Sooperset Mcp-atlassian: Incorrect Implementation of Authentication Algorithm

    also in 1 other product

    		10.0
    HighCVE-2026-77255

    MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue

    also in 1 other product

    		8.6
    HighCVE-2026-73496

    MCP Atlassian: Arbitrary server-side file read via attachment upload

    		7.7
    HighCVE-2026-77247

    Sooperset Mcp-atlassian: External Control of File Name or Path

    also in 1 other product

    		6.5
    HighCVE-2026-77257

    MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths

    also in 1 other product

    		6.5
    HighCVE-2026-77259

    Sooperset Mcp-atlassian: Path Traversal

    also in 1 other product

    		7.7
    HighCVE-2026-77246

    MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path

    also in 1 other product

    		7.4
    HighCVE-2026-77274

    MCP Atlassian: SSRF Protection Bypass

    also in 1 other product

    		8.2
    HighCVE-2026-77260

    Sooperset Mcp-atlassian: Path Traversal

    also in 1 other product

    		7.5
    HighCVE-2026-77256

    MCP Atlassian: OAuth refresh-token backup file is world-readable under default Unix umask

    also in 1 other product

    		6.5
    HighCVE-2026-77253

    MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files

    also in 1 other product

    		7.1
    MediumCVE-2026-77266

    Sooperset Mcp-atlassian: Path Traversal

    also in 1 other product

    		6.5
    HighCVE-2026-73498

    Sooperset Mcp-atlassian: Path Traversal

    		7.7
    MediumCVE-2026-77270

    MCP Atlassian: Arbitrary File Read via Upload Attachment Tools

    also in 1 other product

    		6.5
    HighCVE-2026-77267

    mcp-atlassian has an incomplete SSRF remediation

    also in 1 other product

    		6.5
    HighCVE-2026-77258

    MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()

    also in 1 other product

    		7.7
    HighCVE-2026-77251

    Sooperset Mcp-atlassian: Hardware Child Block Incorrectly Connected to Parent System

    also in 1 other product

    		6.5
    MediumCVE-2026-77269

    Sooperset Mcp-atlassian: Path Traversal

    also in 1 other product

    		6.5

    All vulnerabilities in search

    All products by Sooperset