# Confluence in March 2026: incidents, uptime and changes

> Confluence in March 2026: 2 incidents on its status page (2 major or critical), 98.19% free of major or critical incidents (vendor-reported), 11 CVEs. From Rewindex’s archive of Confluence’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/confluence/2026/03
Last updated: 2026-10-30T13:16:36Z

- Incidents posted: 2 (major/critical: 2) · Maintenance: 0
- By vendor impact label: major 2
- Uptime (vendor-reported): 98.19% free of major/critical incidents, 98.19% free of any incident; outage time 13 h 27 min, incident time 13 h 27 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 11
- Previous month: [February 2026](https://rewindex.com/company/confluence/2026/02.md) · Next: [April 2026](https://rewindex.com/company/confluence/2026/04.md) · [All months](https://rewindex.com/company/confluence/reports.md) · [Confluence](https://rewindex.com/company/confluence.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Automation events delayed for some customers in the APAC region](https://rewindex.com/company/confluence/incidents/b2n7n1gqx94v.md) | major | 2026-03-10 00:15 UTC | 2026-03-10 00:59 UTC | 43 min | resolved |
| [Static macro rendering is failing in Confluence Cloud](https://rewindex.com/company/confluence/incidents/9xld4vg1mly0.md) | major | 2026-03-12 11:42 UTC | 2026-03-13 00:26 UTC | 13 h | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Automation events delayed for some customers in the APAC region](https://rewindex.com/company/confluence/incidents/b2n7n1gqx94v.md) | major | 2026-03-10 00:15 UTC | 2026-03-10 00:59 UTC | 43 min | resolved |
| [Static macro rendering is failing in Confluence Cloud](https://rewindex.com/company/confluence/incidents/9xld4vg1mly0.md) | major | 2026-03-12 11:42 UTC | 2026-03-13 00:26 UTC | 13 h | resolved |

## CVEs published

- [CVE-2026-27601](https://rewindex.com/cve/CVE-2026-27601.md) Underscore.js has unlimited recursion in \_.flatten and \_.isEqual, potential for DoS attack (CVSS 5.9), published 2026-03-03
- [CVE-2026-29062](https://rewindex.com/cve/CVE-2026-29062.md) jackson-core: Nesting Depth Constraint Bypass in \`UTF8DataInputJsonParser\` potentially allowing Resource Exhaustion (CVSS 7.5), published 2026-03-06
- [CVE-2026-29063](https://rewindex.com/cve/CVE-2026-29063.md) Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable (CVSS 8.8), published 2026-03-06
- [CVE-2026-29786](https://rewindex.com/cve/CVE-2026-29786.md) node-tar: Hardlink Path Traversal via Drive-Relative Linkpath (CVSS 8.6), published 2026-03-07
- [CVE-2026-31802](https://rewindex.com/cve/CVE-2026-31802.md) node-tar Symlink Path Traversal via Drive-Relative Linkpath (CVSS 5.5), published 2026-03-09
- [CVE-2026-33671](https://rewindex.com/cve/CVE-2026-33671.md) Picomatch has a ReDoS vulnerability via extglob quantifiers (CVSS 7.5), published 2026-03-26
- [CVE-2026-33750](https://rewindex.com/cve/CVE-2026-33750.md) brace-expansion: Zero-step sequence causes process hang and memory exhaustion (CVSS 6.5), published 2026-03-27
- [CVE-2026-33870](https://rewindex.com/cve/CVE-2026-33870.md) Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing (CVSS 7.5), published 2026-03-27
- [CVE-2026-33871](https://rewindex.com/cve/CVE-2026-33871.md) Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass (CVSS 7.5), published 2026-03-27
- [CVE-2026-34043](https://rewindex.com/cve/CVE-2026-34043.md) Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects (CVSS 5.9), published 2026-03-31
- [CVE-2026-4800](https://rewindex.com/cve/CVE-2026-4800.md) lodash vulnerable to Code Injection via \`\_.template\` imports key names (CVSS 8.1), published 2026-03-31

## Cite this

Confluence posted 2 status incidents in March 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/confluence/2026/03
- Citation: Confluence, “Confluence in March 2026” (2026-03-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/confluence/2026/03 (CC BY 4.0).
- Markdown link: `[Confluence: Confluence in March 2026 (2026-03-01)](https://rewindex.com/company/confluence/2026/03)`


---
Canonical: https://rewindex.com/company/confluence/2026/03 · Markdown: https://rewindex.com/company/confluence/2026/03.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T15:20:48.568Z