CompaniesJiraMonthly reportsSeptember 2026
Jira in September 2026: incidents, uptime and changes
6incidents posted
1labelled major or critical
99.11%free of major/critical
97.75%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 6 h 23 min, incident time 16 h 10 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 1 · Minor 4 · No impact listed 1
Major and critical incidents 1
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Disrupted JIRA availability in US East | Critical | 1.1 h | postmortem | 09-03 |
Other incidents 5
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Jira - Work Item transition failures | Minor | 2.5 h | resolved | 09-01 | |
| Degraded performance of JIRA | Minor | 4.4 h | resolved | 09-01 | |
| Degraded performance affecting Jira Software and Jira Service Management | Minor | 51 min | postmortem | 09-11 | |
| Degraded Performance Accessing Jira | No impact listed | 2.9 h | resolved | 09-24 | |
| Degraded Performance Viewing Issues and Boards | Minor | 2.0 h | resolved | 09-24 |
CVEs published
- CVE-2026-84375 js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources (CVSS 7.5)
- CVE-2026-84292 fast-uri vulnerable to authority injection via an unvalidated port in serialize (CVSS 7.5)
- CVE-2026-19534 undici vulnerable to Denial of Service via unrequested WebSocket subprotocol (CVSS 7.5)
- CVE-2026-21587 (CVSS 7.1)
- CVE-2026-93748 http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale (CVSS 7.5)
- CVE-2026-101898 Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls (CVSS 7.0)
- CVE-2026-101901 Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization (CVSS 8.2)
- CVE-2026-101903 Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS) (CVSS 8.2)
- CVE-2026-101905 Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection (CVSS 7.6)
- CVE-2026-101906 Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location (CVSS 8.2)
- CVE-2026-101909 Axios: Prototype Pollution Gadget in axios toFormData Options (CVSS 8.3)
Cite this
Jira posted 6 status incidents in September 2026 (1 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Jira in September 2026
- Vendor
- Jira
- Date
- URL
- https://rewindex.com/company/jira/2026/09