# Jira in May 2026: incidents, uptime and changes

> Jira in May 2026: 6 incidents on its status page (4 major or critical), 98.15% free of major or critical incidents (vendor-reported), 18 CVEs. From Rewindex’s archive of Jira’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/jira/2026/05
Last updated: 2026-10-26T18:10:00Z

- Incidents posted: 6 (major/critical: 4) · Maintenance: 0
- By vendor impact label: critical 2, major 2, minor 2
- Uptime (vendor-reported): 98.15% free of major/critical incidents, 95.04% free of any incident; outage time 13 h 42 min, incident time 36 h 53 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 18
- Previous month: [April 2026](https://rewindex.com/company/jira/2026/04.md) · Next: [June 2026](https://rewindex.com/company/jira/2026/06.md) · [All months](https://rewindex.com/company/jira/reports.md) · [Jira](https://rewindex.com/company/jira.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [The Work Item view experience of Jira is restored](https://rewindex.com/company/jira/incidents/vbl5kktb1tqy.md) | critical | 2026-05-02 00:55 UTC | 2026-05-02 02:48 UTC | 1.9 h | postmortem |
| [Users experiencing issues accessing multiple Atlassian products](https://rewindex.com/company/jira/incidents/zq3f0j7wph20.md) | critical | 2026-05-14 06:41 UTC | 2026-05-14 06:48 UTC | 7 min | postmortem |
| [Jira users unable to log time while on business board](https://rewindex.com/company/jira/incidents/h5692lfkkmgt.md) | major | 2026-05-06 03:18 UTC | 2026-05-06 06:39 UTC | 3.4 h | resolved |
| [Automations within Jira, Jira Service Management and JSM Assist experiencing delays for some users](https://rewindex.com/company/jira/incidents/90cyzwh234yl.md) | major | 2026-05-13 01:37 UTC | 2026-05-13 09:59 UTC | 8.4 h | postmortem |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [The Work Item view experience of Jira is restored](https://rewindex.com/company/jira/incidents/vbl5kktb1tqy.md) | critical | 2026-05-02 00:55 UTC | 2026-05-02 02:48 UTC | 1.9 h | postmortem |
| [Jira users unable to log time while on business board](https://rewindex.com/company/jira/incidents/h5692lfkkmgt.md) | major | 2026-05-06 03:18 UTC | 2026-05-06 06:39 UTC | 3.4 h | resolved |
| [Multiple Atlassian services are experiencing issues](https://rewindex.com/company/jira/incidents/ryvrzdfwh57v.md) | minor | 2026-05-08 01:31 UTC | 2026-05-08 19:45 UTC | 18 h | postmortem |
| [Automations within Jira, Jira Service Management and JSM Assist experiencing delays for some users](https://rewindex.com/company/jira/incidents/90cyzwh234yl.md) | major | 2026-05-13 01:37 UTC | 2026-05-13 09:59 UTC | 8.4 h | postmortem |
| [Users experiencing issues accessing multiple Atlassian products](https://rewindex.com/company/jira/incidents/zq3f0j7wph20.md) | critical | 2026-05-14 06:41 UTC | 2026-05-14 06:48 UTC | 7 min | postmortem |
| [Forge custom fields are not getting created](https://rewindex.com/company/jira/incidents/jk8ndk4xkl27.md) | minor | 2026-05-20 09:17 UTC | 2026-05-20 14:14 UTC | 5.0 h | resolved |

## CVEs published

- [CVE-2026-6321](https://rewindex.com/cve/CVE-2026-6321.md) fast-uri vulnerable to path traversal via percent-encoded dot segments (CVSS 7.5), published 2026-05-04
- [CVE-2026-6322](https://rewindex.com/cve/CVE-2026-6322.md) fast-uri vulnerable to host confusion via percent-encoded authority delimiters (CVSS 7.5), published 2026-05-05
- [CVE-2026-42264](https://rewindex.com/cve/CVE-2026-42264.md) Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking (CVSS 7.4), published 2026-05-08
- [CVE-2026-41284](https://rewindex.com/cve/CVE-2026-41284.md) Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling (CVSS 7.5), published 2026-05-12
- [CVE-2026-42498](https://rewindex.com/cve/CVE-2026-42498.md) Apache Tomcat: WebSocket authentication header exposure (CVSS 7.3), published 2026-05-12
- [CVE-2026-41293](https://rewindex.com/cve/CVE-2026-41293.md) Apache Tomcat: HTTP/2 request headers not validated (CVSS 9.8), published 2026-05-12
- [CVE-2026-43512](https://rewindex.com/cve/CVE-2026-43512.md) Apache Tomcat: Digest authenticator will authenticate any unknown user (CVSS 9.8), published 2026-05-12
- [CVE-2026-43513](https://rewindex.com/cve/CVE-2026-43513.md) Apache Tomcat: LockOutRealm treats user names as case-sensitive (CVSS 7.5), published 2026-05-12
- [CVE-2026-43515](https://rewindex.com/cve/CVE-2026-43515.md) Apache Tomcat: Security constraints not correctly applied (CVSS 9.1), published 2026-05-12
- [CVE-2026-42581](https://rewindex.com/cve/CVE-2026-42581.md) Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization (CVSS 5.8), published 2026-05-13
- [CVE-2026-42583](https://rewindex.com/cve/CVE-2026-42583.md) Netty: Lz4FrameDecoder resource exhaustion (CVSS 7.5), published 2026-05-13
- [CVE-2026-42584](https://rewindex.com/cve/CVE-2026-42584.md) Netty: HttpClientCodec response desynchronization (CVSS 7.3), published 2026-05-13
- [CVE-2026-42585](https://rewindex.com/cve/CVE-2026-42585.md) Netty: HTTP Request Smuggling due to malformed Transfer-Encoding (CVSS 6.5), published 2026-05-13
- [CVE-2026-42587](https://rewindex.com/cve/CVE-2026-42587.md) Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS (CVSS 7.5), published 2026-05-13
- [CVE-2026-44728](https://rewindex.com/cve/CVE-2026-44728.md) Improper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjs (CVSS 8.2), published 2026-05-26
- [CVE-2026-47759](https://rewindex.com/cve/CVE-2026-47759.md) TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes (CVSS 8.7), published 2026-05-28
- [CVE-2026-47761](https://rewindex.com/cve/CVE-2026-47761.md) TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin \`data-mce-object\` injection (CVSS 8.7), published 2026-05-28
- [CVE-2026-47762](https://rewindex.com/cve/CVE-2026-47762.md) TinyMCE Cross-Site Scripting (XSS) vulnerability through \`mce:protected\` comments (CVSS 8.7), published 2026-05-28

## Cite this

Jira posted 6 status incidents in May 2026 (4 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/jira/2026/05
- Citation: Jira, “Jira in May 2026” (2026-05-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/jira/2026/05 (CC BY 4.0).
- Markdown link: `[Jira: Jira in May 2026 (2026-05-01)](https://rewindex.com/company/jira/2026/05)`


---
Canonical: https://rewindex.com/company/jira/2026/05 · Markdown: https://rewindex.com/company/jira/2026/05.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T10:34:47.352Z