# Jira in April 2026: incidents, uptime and changes

> Jira in April 2026: 4 incidents on its status page (2 major or critical), 98.60% free of major or critical incidents (vendor-reported), 14 CVEs. From Rewindex’s archive of Jira’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/jira/2026/04
Last updated: 2026-10-26T22:10:00Z

- Incidents posted: 4 (major/critical: 2) · Maintenance: 0
- By vendor impact label: critical 2, minor 2
- Uptime (vendor-reported): 98.60% free of major/critical incidents, 97.39% free of any incident; outage time 10 h 1 min, incident time 18 h 46 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 14
- Previous month: [March 2026](https://rewindex.com/company/jira/2026/03.md) · Next: [May 2026](https://rewindex.com/company/jira/2026/05.md) · [All months](https://rewindex.com/company/jira/reports.md) · [Jira](https://rewindex.com/company/jira.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Multiple products impacted by search failures](https://rewindex.com/company/jira/incidents/dl5fbnxkfwpn.md) | critical | 2026-04-08 05:41 UTC | 2026-04-08 11:43 UTC | 6.0 h | postmortem |
| [Disrupted Rovo availability for Automation rules](https://rewindex.com/company/jira/incidents/brrnrqg73r0s.md) | critical | 2026-04-14 12:12 UTC | 2026-04-14 16:11 UTC | 4.0 h | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Multiple products impacted by search failures](https://rewindex.com/company/jira/incidents/dl5fbnxkfwpn.md) | critical | 2026-04-08 05:41 UTC | 2026-04-08 11:43 UTC | 6.0 h | postmortem |
| [Users experiencing issues with login across Atlassian products](https://rewindex.com/company/jira/incidents/5b6kytgmnt43.md) | minor | 2026-04-13 07:29 UTC | 2026-04-13 10:17 UTC | 2.8 h | postmortem |
| [Disrupted Rovo availability for Automation rules](https://rewindex.com/company/jira/incidents/brrnrqg73r0s.md) | critical | 2026-04-14 12:12 UTC | 2026-04-14 16:11 UTC | 4.0 h | resolved |
| [Delays in Jira webhook delivery](https://rewindex.com/company/jira/incidents/jr6nwpw15dc4.md) | minor | 2026-04-30 08:59 UTC | 2026-04-30 14:56 UTC | 6.0 h | resolved |

## CVEs published

- [CVE-2026-29129](https://rewindex.com/cve/CVE-2026-29129.md) Apache Tomcat: TLS cipher order is not preserved (CVSS 7.5), published 2026-04-09
- [CVE-2026-29145](https://rewindex.com/cve/CVE-2026-29145.md) Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVSS 9.1), published 2026-04-09
- [CVE-2026-29146](https://rewindex.com/cve/CVE-2026-29146.md) Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVSS 7.5), published 2026-04-09
- [CVE-2026-34483](https://rewindex.com/cve/CVE-2026-34483.md) Apache Tomcat: Incomplete escaping of JSON access logs (CVSS 7.5), published 2026-04-09
- [CVE-2026-34486](https://rewindex.com/cve/CVE-2026-34486.md) Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor (CVSS 7.5, CISA KEV), published 2026-04-09
- [CVE-2026-34487](https://rewindex.com/cve/CVE-2026-34487.md) Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVSS 7.5), published 2026-04-09
- [CVE-2026-40175](https://rewindex.com/cve/CVE-2026-40175.md) Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain (CVSS 4.8), published 2026-04-10
- [CVE-2025-14813](https://rewindex.com/cve/CVE-2025-14813.md) GOSTCTR implementation unable to process more than 255 blocks correctly (CVSS 7.5), published 2026-04-15
- [CVE-2026-42033](https://rewindex.com/cve/CVE-2026-42033.md) Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking (CVSS 7.4), published 2026-04-24
- [CVE-2026-42035](https://rewindex.com/cve/CVE-2026-42035.md) Axios: Header Injection via Prototype Pollution (CVSS 7.4), published 2026-04-24
- [CVE-2026-42044](https://rewindex.com/cve/CVE-2026-42044.md) Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in \`parseReviver\` (CVSS 6.5), published 2026-04-24
- [CVE-2026-42043](https://rewindex.com/cve/CVE-2026-42043.md) Axios: Incomplete Fix for CVE-2025-62718 — NO\_PROXY  Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8)  in Axios 1.15.0 (CVSS 7.2), published 2026-04-24
- [CVE-2026-42038](https://rewindex.com/cve/CVE-2026-42038.md) Axios: no\_proxy bypass via IP alias allows SSRF (CVSS 6.8), published 2026-04-24
- [CVE-2026-42198](https://rewindex.com/cve/CVE-2026-42198.md) pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS (CVSS 7.5), published 2026-04-29

## Cite this

Jira posted 4 status incidents in April 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/jira/2026/04
- Citation: Jira, “Jira in April 2026” (2026-04-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/jira/2026/04 (CC BY 4.0).
- Markdown link: `[Jira: Jira in April 2026 (2026-04-01)](https://rewindex.com/company/jira/2026/04)`


---
Canonical: https://rewindex.com/company/jira/2026/04 · Markdown: https://rewindex.com/company/jira/2026/04.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T17:59:01.247Z