# Confluence in July 2026: incidents, uptime and changes

> Confluence in July 2026: 1 incident on its status page (1 major or critical), 99.50% free of major or critical incidents (vendor-reported), 18 CVEs. From Rewindex’s archive of Confluence’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/confluence/2026/07
Last updated: 2026-10-29T21:17:29Z

- Incidents posted: 1 (major/critical: 1) · Maintenance: 0
- By vendor impact label: critical 1
- Uptime (vendor-reported): 99.50% free of major/critical incidents, 99.50% free of any incident; outage time 3 h 40 min, incident time 3 h 40 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 18
- Previous month: [June 2026](https://rewindex.com/company/confluence/2026/06.md) · Next: [August 2026](https://rewindex.com/company/confluence/2026/08.md) · [All months](https://rewindex.com/company/confluence/reports.md) · [Confluence](https://rewindex.com/company/confluence.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Reliability issues with Jira and Confluence](https://rewindex.com/company/confluence/incidents/d9dmvhzl0lx4.md) | critical | 2026-07-06 09:23 UTC | 2026-07-06 13:04 UTC | 3.7 h | postmortem |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Reliability issues with Jira and Confluence](https://rewindex.com/company/confluence/incidents/d9dmvhzl0lx4.md) | critical | 2026-07-06 09:23 UTC | 2026-07-06 13:04 UTC | 3.7 h | postmortem |

## CVEs published

- [CVE-2026-54291](https://rewindex.com/cve/CVE-2026-54291.md) Silent channel-binding authentication downgrade via unsupported certificate algorithms (CVSS 5.9), published 2026-07-06
- [CVE-2026-59873](https://rewindex.com/cve/CVE-2026-59873.md) node-tar: Decompression/parse DoS via unlimited input (CVSS 7.5), published 2026-07-08
- [CVE-2026-59874](https://rewindex.com/cve/CVE-2026-59874.md) node-tar: Negative tar entry size causes infinite loop in archive replace (CVSS 7.5), published 2026-07-08
- [CVE-2026-59871](https://rewindex.com/cve/CVE-2026-59871.md) node-tar: Process crash via PAX numeric path type confusion (CVSS 5.3), published 2026-07-08
- [CVE-2026-59880](https://rewindex.com/cve/CVE-2026-59880.md) Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set (CVSS 7.5), published 2026-07-08
- [CVE-2026-59879](https://rewindex.com/cve/CVE-2026-59879.md) Immutable.js \`List\` 32-bit trie overflow → unrecoverable DoS (CVSS 7.5), published 2026-07-08
- [CVE-2026-59887](https://rewindex.com/cve/CVE-2026-59887.md) linkify-it: Quadratic-complexity DoS via the \`mailto:\` validator scan-loop on attacker text (CVSS 7.5), published 2026-07-08
- [CVE-2026-48801](https://rewindex.com/cve/CVE-2026-48801.md) linkify-it: Quadratic algorithmic complexity in LinkifyIt\#match scan loop (CVSS 7.5), published 2026-07-14
- [CVE-2026-55831](https://rewindex.com/cve/CVE-2026-55831.md) Netty SPDY SETTINGS frame count materializes unbounded settings map (CVSS 7.5), published 2026-07-20
- [CVE-2026-55833](https://rewindex.com/cve/CVE-2026-55833.md) Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation (CVSS 7.5), published 2026-07-20
- [CVE-2026-21579](https://rewindex.com/cve/CVE-2026-21579.md)  (CVSS 7.5), published 2026-07-21
- [CVE-2026-21577](https://rewindex.com/cve/CVE-2026-21577.md)  (CVSS 6.5), published 2026-07-21
- [CVE-2026-56745](https://rewindex.com/cve/CVE-2026-56745.md) Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST\_STREAM Leads to Native Memory Exhaustion (CVSS 7.5), published 2026-07-21
- [CVE-2026-56819](https://rewindex.com/cve/CVE-2026-56819.md) Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS) (CVSS 7.5), published 2026-07-21
- [CVE-2026-45623](https://rewindex.com/cve/CVE-2026-45623.md) PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments (CVSS 7.5), published 2026-07-27
- [CVE-2026-67213](https://rewindex.com/cve/CVE-2026-67213.md) nanoid before 5.1.6 Infinite Loop via Zero Size in customAlphabet and customRandom (CVSS 5.9), published 2026-07-29
- [CVE-2026-67214](https://rewindex.com/cve/CVE-2026-67214.md) nanoid Infinite Loop via Negative Size in non-secure module (CVSS 5.9), published 2026-07-29
- [CVE-2026-59901](https://rewindex.com/cve/CVE-2026-59901.md) Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang (CVSS 7.5), published 2026-07-29

## Cite this

Confluence posted 1 status incident in July 2026 (1 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/confluence/2026/07
- Citation: Confluence, “Confluence in July 2026” (2026-07-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/confluence/2026/07 (CC BY 4.0).
- Markdown link: `[Confluence: Confluence in July 2026 (2026-07-01)](https://rewindex.com/company/confluence/2026/07)`


---
Canonical: https://rewindex.com/company/confluence/2026/07 · Markdown: https://rewindex.com/company/confluence/2026/07.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:13:33.426Z