# Jira in September 2026: incidents, uptime and changes

> Jira in September 2026: 6 incidents on its status page (1 major or critical), 99.11% free of major or critical incidents (vendor-reported), 11 CVEs. From Rewindex’s archive of Jira’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/jira/2026/09
Last updated: 2026-10-14T23:19:08Z

- Incidents posted: 6 (major/critical: 1) · Maintenance: 0
- By vendor impact label: critical 1, minor 4, none 1
- Uptime (vendor-reported): 99.11% free of major/critical incidents, 97.75% free of any incident; outage time 6 h 23 min, incident time 16 h 10 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 11
- Previous month: [August 2026](https://rewindex.com/company/jira/2026/08.md) · Next: [October 2026](https://rewindex.com/company/jira/2026/10.md) · [All months](https://rewindex.com/company/jira/reports.md) · [Jira](https://rewindex.com/company/jira.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Disrupted JIRA availability in US East](https://rewindex.com/company/jira/incidents/ws0393rxcgyl.md) | critical | 2026-09-03 15:57 UTC | 2026-09-03 17:02 UTC | 1.1 h | postmortem |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Jira - Work Item transition failures](https://rewindex.com/company/jira/incidents/yntgmb0w71xn.md) | minor | 2026-09-01 09:12 UTC | 2026-09-01 11:44 UTC | 2.5 h | resolved |
| [Degraded performance of JIRA](https://rewindex.com/company/jira/incidents/2ghgdxhpfx4l.md) | minor | 2026-09-01 17:09 UTC | 2026-09-01 21:35 UTC | 4.4 h | resolved |
| [Disrupted JIRA availability in US East](https://rewindex.com/company/jira/incidents/ws0393rxcgyl.md) | critical | 2026-09-03 15:57 UTC | 2026-09-03 17:02 UTC | 1.1 h | postmortem |
| [Degraded performance affecting Jira Software and Jira Service Management](https://rewindex.com/company/jira/incidents/kvpmkndcdfyk.md) | minor | 2026-09-11 07:46 UTC | 2026-09-11 08:37 UTC | 51 min | postmortem |
| [Degraded Performance Accessing Jira](https://rewindex.com/company/jira/incidents/z77zzqy19l1v.md) | none | 2026-09-24 08:52 UTC | 2026-09-24 11:46 UTC | 2.9 h | resolved |
| [Degraded Performance Viewing Issues and Boards](https://rewindex.com/company/jira/incidents/wzv0rl24mm4s.md) | minor | 2026-09-24 13:54 UTC | 2026-09-24 15:53 UTC | 2.0 h | resolved |

## CVEs published

- [CVE-2026-84375](https://rewindex.com/cve/CVE-2026-84375.md) js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources (CVSS 7.5), published 2026-09-01
- [CVE-2026-84292](https://rewindex.com/cve/CVE-2026-84292.md) fast-uri vulnerable to authority injection via an unvalidated port in serialize (CVSS 7.5), published 2026-09-02
- [CVE-2026-19534](https://rewindex.com/cve/CVE-2026-19534.md) undici vulnerable to Denial of Service via unrequested WebSocket subprotocol (CVSS 7.5), published 2026-09-04
- [CVE-2026-21587](https://rewindex.com/cve/CVE-2026-21587.md)  (CVSS 7.1), published 2026-09-15
- [CVE-2026-93748](https://rewindex.com/cve/CVE-2026-93748.md) http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale (CVSS 7.5), published 2026-09-18
- [CVE-2026-101898](https://rewindex.com/cve/CVE-2026-101898.md) Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls (CVSS 7.0), published 2026-09-28
- [CVE-2026-101901](https://rewindex.com/cve/CVE-2026-101901.md) Axios: Denial of Service  via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization (CVSS 8.2), published 2026-09-28
- [CVE-2026-101903](https://rewindex.com/cve/CVE-2026-101903.md) Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS) (CVSS 8.2), published 2026-09-28
- [CVE-2026-101905](https://rewindex.com/cve/CVE-2026-101905.md) Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection (CVSS 7.6), published 2026-09-28
- [CVE-2026-101906](https://rewindex.com/cve/CVE-2026-101906.md) Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location (CVSS 8.2), published 2026-09-28
- [CVE-2026-101909](https://rewindex.com/cve/CVE-2026-101909.md) Axios: Prototype Pollution Gadget in axios toFormData Options (CVSS 8.3), published 2026-09-28

## Cite this

Jira posted 6 status incidents in September 2026 (1 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/jira/2026/09
- Citation: Jira, “Jira in September 2026” (2026-09-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/jira/2026/09 (CC BY 4.0).
- Markdown link: `[Jira: Jira in September 2026 (2026-09-01)](https://rewindex.com/company/jira/2026/09)`


---
Canonical: https://rewindex.com/company/jira/2026/09 · Markdown: https://rewindex.com/company/jira/2026/09.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T14:33:58.913Z
