Topic

Cve 2026 77244

Coverage tagged cve 2026 77244.

Articles: 1
Desk: 1

Data graphic: the mcp-atlassian MCP server flaw CVE-2026-77244 is rated CVSS 10.0 because its HTTP transport let anyone on the network act as the operator. "Fixed in 0.22.0" is struck through and corrected to "Run 0.23.1", since the SSE transport kept the same bypass until 19 Aug; versions before 0.22.0 are affected and no exploitation has been reported.

highAI Security Cve 2026 77244

MCP Atlassian Server Let Anyone on the Network Act as the Operator in Jira and Confluence

CVE-2026-77244 (CVSS 10.0): mcp-atlassian's HTTP transport ran unauthenticated requests with the operator's Atlassian token. Upgrade to 0.23.1.

Oct 2 · 7 min