# Confluence in May 2026: incidents, uptime and changes

> Confluence in May 2026: 4 incidents on its status page (2 major or critical), 99.50% free of major or critical incidents (vendor-reported), 16 CVEs. From Rewindex’s archive of Confluence’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/confluence/2026/05
Last updated: 2026-10-26T18:10:00Z

- Incidents posted: 4 (major/critical: 2) · Maintenance: 0
- By vendor impact label: critical 1, major 1, minor 2
- Uptime (vendor-reported): 99.50% free of major/critical incidents, 96.61% free of any incident; outage time 3 h 39 min, incident time 25 h 9 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 16
- Previous month: [April 2026](https://rewindex.com/company/confluence/2026/04.md) · Next: [June 2026](https://rewindex.com/company/confluence/2026/06.md) · [All months](https://rewindex.com/company/confluence/reports.md) · [Confluence](https://rewindex.com/company/confluence.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Users experiencing issues accessing multiple Atlassian products](https://rewindex.com/company/confluence/incidents/6d4pspqjz580.md) | critical | 2026-05-14 04:54 UTC | 2026-05-14 06:48 UTC | 1.9 h | postmortem |
| [Users facing errors when attempting to view Calendars in Confluence](https://rewindex.com/company/confluence/incidents/f57nlkkxp613.md) | major | 2026-05-27 06:03 UTC | 2026-05-27 07:48 UTC | 1.8 h | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Multiple Atlassian services are experiencing issues](https://rewindex.com/company/confluence/incidents/h46z9lwflp2s.md) | minor | 2026-05-08 01:31 UTC | 2026-05-08 19:45 UTC | 18 h | postmortem |
| [Users experiencing issues accessing multiple Atlassian products](https://rewindex.com/company/confluence/incidents/6d4pspqjz580.md) | critical | 2026-05-14 04:54 UTC | 2026-05-14 06:48 UTC | 1.9 h | postmortem |
| [Some macros failing to load in the Confluence Cloud editor](https://rewindex.com/company/confluence/incidents/lyq4q92jc03l.md) | minor | 2026-05-26 10:40 UTC | 2026-05-26 13:55 UTC | 3.3 h | resolved |
| [Users facing errors when attempting to view Calendars in Confluence](https://rewindex.com/company/confluence/incidents/f57nlkkxp613.md) | major | 2026-05-27 06:03 UTC | 2026-05-27 07:48 UTC | 1.8 h | resolved |

## CVEs published

- [CVE-2026-6321](https://rewindex.com/cve/CVE-2026-6321.md) fast-uri vulnerable to path traversal via percent-encoded dot segments (CVSS 7.5), published 2026-05-04
- [CVE-2026-6322](https://rewindex.com/cve/CVE-2026-6322.md) fast-uri vulnerable to host confusion via percent-encoded authority delimiters (CVSS 7.5), published 2026-05-05
- [CVE-2026-42264](https://rewindex.com/cve/CVE-2026-42264.md) Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking (CVSS 7.4), published 2026-05-08
- [CVE-2026-41284](https://rewindex.com/cve/CVE-2026-41284.md) Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling (CVSS 7.5), published 2026-05-12
- [CVE-2026-42498](https://rewindex.com/cve/CVE-2026-42498.md) Apache Tomcat: WebSocket authentication header exposure (CVSS 7.3), published 2026-05-12
- [CVE-2026-41293](https://rewindex.com/cve/CVE-2026-41293.md) Apache Tomcat: HTTP/2 request headers not validated (CVSS 9.8), published 2026-05-12
- [CVE-2026-43512](https://rewindex.com/cve/CVE-2026-43512.md) Apache Tomcat: Digest authenticator will authenticate any unknown user (CVSS 9.8), published 2026-05-12
- [CVE-2026-43513](https://rewindex.com/cve/CVE-2026-43513.md) Apache Tomcat: LockOutRealm treats user names as case-sensitive (CVSS 7.5), published 2026-05-12
- [CVE-2026-43515](https://rewindex.com/cve/CVE-2026-43515.md) Apache Tomcat: Security constraints not correctly applied (CVSS 9.1), published 2026-05-12
- [CVE-2026-42579](https://rewindex.com/cve/CVE-2026-42579.md) Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder) (CVSS 7.5), published 2026-05-13
- [CVE-2026-42583](https://rewindex.com/cve/CVE-2026-42583.md) Netty: Lz4FrameDecoder resource exhaustion (CVSS 7.5), published 2026-05-13
- [CVE-2026-42584](https://rewindex.com/cve/CVE-2026-42584.md) Netty: HttpClientCodec response desynchronization (CVSS 7.3), published 2026-05-13
- [CVE-2026-42585](https://rewindex.com/cve/CVE-2026-42585.md) Netty: HTTP Request Smuggling due to malformed Transfer-Encoding (CVSS 6.5), published 2026-05-13
- [CVE-2026-42587](https://rewindex.com/cve/CVE-2026-42587.md) Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS (CVSS 7.5), published 2026-05-13
- [CVE-2026-45736](https://rewindex.com/cve/CVE-2026-45736.md) ws: Uninitialized memory disclosure (CVSS 4.4), published 2026-05-15
- [CVE-2026-45149](https://rewindex.com/cve/CVE-2026-45149.md) brace-expansion: Large numeric range defeats documented \`max\` DoS protection (CVSS 6.5), published 2026-05-29

## Cite this

Confluence posted 4 status incidents in May 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/confluence/2026/05
- Citation: Confluence, “Confluence in May 2026” (2026-05-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/confluence/2026/05 (CC BY 4.0).
- Markdown link: `[Confluence: Confluence in May 2026 (2026-05-01)](https://rewindex.com/company/confluence/2026/05)`


---
Canonical: https://rewindex.com/company/confluence/2026/05 · Markdown: https://rewindex.com/company/confluence/2026/05.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T16:46:25.634Z