CompaniesJiraMonthly reportsAugust 2026
Jira in August 2026: incidents, uptime and changes
6incidents posted
4labelled major or critical
98.16%free of major/critical
97.59%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 13 h 38 min, incident time 17 h 53 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 2 · Major 2 · Minor 2
Major and critical incidents 4
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Performance and access related issues with Jira | Critical | 1.4 h | resolved | 08-07 | |
| Issues accessing multiple Atlassian products in some regions | Critical | 54 min | postmortem | 08-27 | |
| Notifications are delayed | Major | 5.8 h | resolved | 08-25 | |
| Fetching mails from Microsoft accounts producing errors and preventing email based creation of Jira work items | Major | 11 h | resolved | 08-31 |
Other incidents 2
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Degraded performance of JIRA | Minor | 22 min | resolved | 08-07 | |
| Degraded performance of Notifications | Minor | 3.9 h | resolved | 08-24 |
CVEs published
- CVE-2026-67320 axios before 0.33.0 Prototype Pollution via Node HTTP adapter (CVSS 7.5)
- CVE-2026-8763 Name Constraints bypass via trailing dot in rfc822Name and URI (CVSS 9.1)
- CVE-2026-12185 BKS/UBER keystore allocates from untrusted lengths before integrity check (CVSS 8.6)
- CVE-2026-59651 BKS keystore accepts legacy version with 16-bit integrity MAC key (CVSS 7.5)
- CVE-2026-59650 MTI/A0 DH agreement exponentiates unvalidated peer value (CVSS 9.1)
- CVE-2026-59645 OER parser recurses without depth limit on self-referential IEEE 1609.2 schema (CVSS 7.5)
- CVE-2026-59642 CMS AuthenticatedData content not bound to MAC when authAttrs present (CVSS 7.5)
- CVE-2026-59639 CMS verifySignatures returns true for SignedData with zero signers (CVSS 7.5)
- CVE-2026-58062 Stapled OCSP response accepted without binding to the checked certificate (CVSS 9.1)
- CVE-2026-58061 CCM-family modes write plaintext to caller buffer before tag check (CVSS 7.5)
- CVE-2026-58060 HSS public-key level count unbounded, enabling huge allocation on verify (CVSS 7.5)
- CVE-2026-58059 Quadratic-time escaping when stringifying X.500 distinguished names (CVSS 7.5)
- CVE-2026-14682 Possible OOM from unbounded up-front allocation on a definite-length read (CVSS 7.5)
- CVE-2026-12802 CMS AuthEnvelopedData fails to enforce tag-length on decryption (CVSS 7.5)
- CVE-2026-12803 KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) (CVSS 7.5)
- CVE-2026-12816 IESEngine stream-mode MAC forgery via length-dependent KDF split (CVSS 7.5)
- CVE-2026-12860 RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path (CVSS 5.3)
- CVE-2026-13506 Lazy ASN.1 sequence forcing resets nesting-depth guard (CVSS 7.5)
- CVE-2026-69152 brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation (CVSS 7.5)
- CVE-2026-69192 ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass (CVSS 7.7)
- CVE-2026-68494 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq) (CVSS 8.7)
- CVE-2026-73086 nanoid: Integer Overflow or Wraparound (CVSS 7.4)
- CVE-2026-73088 Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats) (CVSS 7.5)
- CVE-2026-73089 Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM (CVSS 7.5)
- CVE-2026-73507 Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion (CVSS 7.5)
- CVE-2026-73566 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection (CVSS 7.5)
- CVE-2026-73646 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure (CVSS 7.5)
- CVE-2026-59903 Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite (CVSS 6.5)
- CVE-2026-21582 (CVSS 8.8)
- CVE-2026-75596 Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing (CVSS 7.5)
- CVE-2026-75595 Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext (CVSS 9.1)
- CVE-2026-75140 jsoup Uncontrolled Resource Consumption in XmlTreeBuilder (CVSS 7.5)
- CVE-2026-62243 Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass (CVSS 7.5)
- CVE-2026-75899 fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding (CVSS 7.5)
- CVE-2026-75975 fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization (CVSS 7.5)
- CVE-2026-76172 fast-uri vulnerable to host confusion via percent-encoded scheme normalization (CVSS 7.5)
- CVE-2026-65183 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets (CVSS 8.1)
- CVE-2026-65637 Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete (CVSS 9.8)
- CVE-2026-65927 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control (CVSS 7.5)
- CVE-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints (CVSS 8.1)
- CVE-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases (CVSS 8.1)
- CVE-2026-68763 Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset (CVSS 7.5)
Cite this
Jira posted 6 status incidents in August 2026 (4 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Jira in August 2026
- Vendor
- Jira
- Date
- URL
- https://rewindex.com/company/jira/2026/08