CVE-2026-77244 - MCP Atlassian HTTP transport auth bypass lets remote clients act as operator in Jira/Confluence - Upwind | Cloud & AI Security for the Realtime Era

Security Feed

See the latest insights and analysis from our MDR team.

CVE-2026-77244

By Roy Kalfon |

22 September 2026

CVE-2026-77244 – MCP Atlassian HTTP transport auth bypass lets remote clients act as operator in Jira/Confluence

mcp-atlassian `