# Jira in August 2026: incidents, uptime and changes

> Jira in August 2026: 6 incidents on its status page (4 major or critical), 98.16% free of major or critical incidents (vendor-reported), 42 CVEs. From Rewindex’s archive of Jira’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/jira/2026/08
Last updated: 2026-10-26T10:10:00Z

- Incidents posted: 6 (major/critical: 4) · Maintenance: 0
- By vendor impact label: critical 2, major 2, minor 2
- Uptime (vendor-reported): 98.16% free of major/critical incidents, 97.59% free of any incident; outage time 13 h 38 min, incident time 17 h 53 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 42
- Previous month: [July 2026](https://rewindex.com/company/jira/2026/07.md) · Next: [September 2026](https://rewindex.com/company/jira/2026/09.md) · [All months](https://rewindex.com/company/jira/reports.md) · [Jira](https://rewindex.com/company/jira.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Performance and access related issues with Jira](https://rewindex.com/company/jira/incidents/tv6rfjx9233y.md) | critical | 2026-08-07 11:30 UTC | 2026-08-07 12:52 UTC | 1.4 h | resolved |
| [Issues accessing multiple Atlassian products in some regions](https://rewindex.com/company/jira/incidents/jv8mdjyh9cn7.md) | critical | 2026-08-27 04:22 UTC | 2026-08-27 05:16 UTC | 54 min | postmortem |
| [Notifications are delayed](https://rewindex.com/company/jira/incidents/l9ryy7d07wky.md) | major | 2026-08-25 08:42 UTC | 2026-08-25 14:33 UTC | 5.8 h | resolved |
| [Fetching mails from Microsoft accounts producing errors and preventing email based creation of Jira work items](https://rewindex.com/company/jira/incidents/3w5c3rkxcgwz.md) | major | 2026-08-31 18:28 UTC | 2026-09-01 05:18 UTC | 11 h | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Degraded performance of JIRA](https://rewindex.com/company/jira/incidents/r2dllgb24x2h.md) | minor | 2026-08-07 01:24 UTC | 2026-08-07 01:46 UTC | 22 min | resolved |
| [Performance and access related issues with Jira](https://rewindex.com/company/jira/incidents/tv6rfjx9233y.md) | critical | 2026-08-07 11:30 UTC | 2026-08-07 12:52 UTC | 1.4 h | resolved |
| [Degraded performance of Notifications](https://rewindex.com/company/jira/incidents/fnvv9p58fphf.md) | minor | 2026-08-24 19:22 UTC | 2026-08-24 23:15 UTC | 3.9 h | resolved |
| [Notifications are delayed](https://rewindex.com/company/jira/incidents/l9ryy7d07wky.md) | major | 2026-08-25 08:42 UTC | 2026-08-25 14:33 UTC | 5.8 h | resolved |
| [Issues accessing multiple Atlassian products in some regions](https://rewindex.com/company/jira/incidents/jv8mdjyh9cn7.md) | critical | 2026-08-27 04:22 UTC | 2026-08-27 05:16 UTC | 54 min | postmortem |
| [Fetching mails from Microsoft accounts producing errors and preventing email based creation of Jira work items](https://rewindex.com/company/jira/incidents/3w5c3rkxcgwz.md) | major | 2026-08-31 18:28 UTC | 2026-09-01 05:18 UTC | 11 h | resolved |

## CVEs published

- [CVE-2026-67320](https://rewindex.com/cve/CVE-2026-67320.md) axios before 0.33.0 Prototype Pollution via Node HTTP adapter (CVSS 7.5), published 2026-08-01
- [CVE-2026-8763](https://rewindex.com/cve/CVE-2026-8763.md) Name Constraints bypass via trailing dot in rfc822Name and URI (CVSS 9.1), published 2026-08-03
- [CVE-2026-12185](https://rewindex.com/cve/CVE-2026-12185.md) BKS/UBER keystore allocates from untrusted lengths before integrity check (CVSS 8.6), published 2026-08-03
- [CVE-2026-59651](https://rewindex.com/cve/CVE-2026-59651.md) BKS keystore accepts legacy version with 16-bit integrity MAC key (CVSS 7.5), published 2026-08-03
- [CVE-2026-59650](https://rewindex.com/cve/CVE-2026-59650.md) MTI/A0 DH agreement exponentiates unvalidated peer value (CVSS 9.1), published 2026-08-03
- [CVE-2026-59645](https://rewindex.com/cve/CVE-2026-59645.md) OER parser recurses without depth limit on self-referential IEEE 1609.2 schema (CVSS 7.5), published 2026-08-03
- [CVE-2026-59642](https://rewindex.com/cve/CVE-2026-59642.md) CMS AuthenticatedData content not bound to MAC when authAttrs present (CVSS 7.5), published 2026-08-03
- [CVE-2026-59639](https://rewindex.com/cve/CVE-2026-59639.md) CMS verifySignatures returns true for SignedData with zero signers (CVSS 7.5), published 2026-08-03
- [CVE-2026-58062](https://rewindex.com/cve/CVE-2026-58062.md) Stapled OCSP response accepted without binding to the checked certificate (CVSS 9.1), published 2026-08-03
- [CVE-2026-58061](https://rewindex.com/cve/CVE-2026-58061.md) CCM-family modes write plaintext to caller buffer before tag check (CVSS 7.5), published 2026-08-03
- [CVE-2026-58060](https://rewindex.com/cve/CVE-2026-58060.md) HSS public-key level count unbounded, enabling huge allocation on verify (CVSS 7.5), published 2026-08-03
- [CVE-2026-58059](https://rewindex.com/cve/CVE-2026-58059.md) Quadratic-time escaping when stringifying X.500 distinguished names (CVSS 7.5), published 2026-08-03
- [CVE-2026-14682](https://rewindex.com/cve/CVE-2026-14682.md) Possible OOM from unbounded up-front allocation on a definite-length read (CVSS 7.5), published 2026-08-03
- [CVE-2026-12802](https://rewindex.com/cve/CVE-2026-12802.md) CMS AuthEnvelopedData fails to enforce tag-length on decryption (CVSS 7.5), published 2026-08-03
- [CVE-2026-12803](https://rewindex.com/cve/CVE-2026-12803.md) KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) (CVSS 7.5), published 2026-08-03
- [CVE-2026-12816](https://rewindex.com/cve/CVE-2026-12816.md) IESEngine stream-mode MAC forgery via length-dependent KDF split (CVSS 7.5), published 2026-08-03
- [CVE-2026-12860](https://rewindex.com/cve/CVE-2026-12860.md) RSA PKCS\#1 verification skips last two hash bytes in NULL-omitted path (CVSS 5.3), published 2026-08-03
- [CVE-2026-13506](https://rewindex.com/cve/CVE-2026-13506.md) Lazy ASN.1 sequence forcing resets nesting-depth guard (CVSS 7.5), published 2026-08-03
- [CVE-2026-69152](https://rewindex.com/cve/CVE-2026-69152.md) brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation (CVSS 7.5), published 2026-08-03
- [CVE-2026-69192](https://rewindex.com/cve/CVE-2026-69192.md) ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass (CVSS 7.7), published 2026-08-03
- [CVE-2026-68494](https://rewindex.com/cve/CVE-2026-68494.md) jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq) (CVSS 8.7), published 2026-08-04
- [CVE-2026-73086](https://rewindex.com/cve/CVE-2026-73086.md) nanoid: Integer Overflow or Wraparound (CVSS 7.4), published 2026-08-11
- [CVE-2026-73088](https://rewindex.com/cve/CVE-2026-73088.md) Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats) (CVSS 7.5), published 2026-08-11
- [CVE-2026-73089](https://rewindex.com/cve/CVE-2026-73089.md) Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM (CVSS 7.5), published 2026-08-11
- [CVE-2026-73507](https://rewindex.com/cve/CVE-2026-73507.md) Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion (CVSS 7.5), published 2026-08-13
- [CVE-2026-73566](https://rewindex.com/cve/CVE-2026-73566.md) node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection (CVSS 7.5), published 2026-08-13
- [CVE-2026-73646](https://rewindex.com/cve/CVE-2026-73646.md) PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure (CVSS 7.5), published 2026-08-17
- [CVE-2026-59903](https://rewindex.com/cve/CVE-2026-59903.md) Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite (CVSS 6.5), published 2026-08-17
- [CVE-2026-21582](https://rewindex.com/cve/CVE-2026-21582.md)  (CVSS 8.8), published 2026-08-18
- [CVE-2026-75596](https://rewindex.com/cve/CVE-2026-75596.md) Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing (CVSS 7.5), published 2026-08-19
- [CVE-2026-75595](https://rewindex.com/cve/CVE-2026-75595.md) Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext (CVSS 9.1), published 2026-08-19
- [CVE-2026-75140](https://rewindex.com/cve/CVE-2026-75140.md) jsoup Uncontrolled Resource Consumption in XmlTreeBuilder (CVSS 7.5), published 2026-08-20
- [CVE-2026-62243](https://rewindex.com/cve/CVE-2026-62243.md) Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass (CVSS 7.5), published 2026-08-22
- [CVE-2026-75899](https://rewindex.com/cve/CVE-2026-75899.md) fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding (CVSS 7.5), published 2026-08-24
- [CVE-2026-75975](https://rewindex.com/cve/CVE-2026-75975.md) fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization (CVSS 7.5), published 2026-08-24
- [CVE-2026-76172](https://rewindex.com/cve/CVE-2026-76172.md) fast-uri vulnerable to host confusion via percent-encoded scheme normalization (CVSS 7.5), published 2026-08-24
- [CVE-2026-65183](https://rewindex.com/cve/CVE-2026-65183.md) Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets (CVSS 8.1), published 2026-08-25
- [CVE-2026-65637](https://rewindex.com/cve/CVE-2026-65637.md) Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete (CVSS 9.8), published 2026-08-25
- [CVE-2026-65927](https://rewindex.com/cve/CVE-2026-65927.md) Apache Tomcat: RewriteValve \[N\] restarts at the second rule and may bypass access control (CVSS 7.5), published 2026-08-25
- [CVE-2026-66422](https://rewindex.com/cve/CVE-2026-66422.md) Apache Tomcat: Servlet role references can bypass declarative role constraints (CVSS 8.1), published 2026-08-25
- [CVE-2026-68569](https://rewindex.com/cve/CVE-2026-68569.md) Apache Tomcat: Principal lookup can fail open in some cases (CVSS 8.1), published 2026-08-25
- [CVE-2026-68763](https://rewindex.com/cve/CVE-2026-68763.md) Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset (CVSS 7.5), published 2026-08-25

## Cite this

Jira posted 6 status incidents in August 2026 (4 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/jira/2026/08
- Citation: Jira, “Jira in August 2026” (2026-08-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/jira/2026/08 (CC BY 4.0).
- Markdown link: `[Jira: Jira in August 2026 (2026-08-01)](https://rewindex.com/company/jira/2026/08)`


---
Canonical: https://rewindex.com/company/jira/2026/08 · Markdown: https://rewindex.com/company/jira/2026/08.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T16:13:31.295Z