Remote Code Execution Vulnerability in Bamboo Data Center by Atlassian
CVE-2026-21570

8.6HIGH

Key Information:

Vendor

Atlassian
Status
Bamboo Data Center
Vendor
CVE Published:
17 March 2026

What is CVE-2026-21570?

A Remote Code Execution (RCE) vulnerability has been identified in multiple versions of Bamboo Data Center, allowing authenticated attackers to execute arbitrary code on the affected systems. This exploit is particularly serious as it could lead to unauthorized access and potential data breaches. Atlassian advises users to promptly upgrade to the latest version or apply specific updates to mitigate the risk associated with this vulnerability. For guidance on upgrading, users can check the supported fixed versions and download links provided by Atlassian.

Affected Version(s)

Bamboo Data Center 12.1.0 to 12.1.2

Bamboo Data Center 12.0.0 to 12.0.2

Bamboo Data Center 11.0.0 to 11.0.8

References

https://confluence.atlassian.com/pages/viewpage.action?pa...
https://jira.atlassian.com/browse/BAM-26342

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.