Atlassian Bamboo/Confluence High-Severity Vulnerability Patch Guide (RCE/DoS)

Vulnerability Overview Release Date: August 18, 2026 Vulnerability Count: 162 high-severity vulnerabilities and 10 third-party vulnerabilities Vulnerability Types: Including Remote Code Execution (RCE), Denial of Service (DoS), encryption failures, etc. Scope of Impact Affected Products: - Bamboo Data Center and Server - Confluence Data Center and Confluence Server - Assets Discovery - Atlassian Companion Apps for Mac OS Affected Versions: - Bamboo Data Center and Server: 12.1.0, 12.1.9, 12.0.0, 12.0.2, 10.0.0, 11.0.8, 10.2.0, 10.2.21 - Confluence Data Center and Confluence Server: 10.0.0, 11.0.8, 10.2.0, 10.2.21 - Assets Discovery: 10.0.0, 11.0.8, 10.2.0, 10.2.21 - Atlassian Companion Apps for Mac OS: 10.1.0 Remediation Recommended Action: Upgrade product instances to the latest patched versions Patched Versions: - Bamboo Data Center and Server: 12.1.10 (LTS), 10.2.22 (LTS) - Confluence Data Center and Confluence Server: 10.2.22 (LTS) - Assets Discovery: 10.2.22 (LTS) - Atlassian Companion Apps for Mac OS: 10.1.1 Vulnerability Details CVE-2026-14682: Remote Code Execution (RCE) - CVSS Score: 8.7 High - Vulnerability Description: org.bouncycastle:bcpkix-jdk15on Dependency in Bamboo Data Center CVE-2026-12143: Remote Code Execution (RCE) - CVSS Score: 8.7 High - Vulnerability Description: form-data Dependency in Bamboo Data Center CVE-2026-58059: Denial of Service (DoS) - CVSS Score: 8.7 High - Vulnerability Description: org.bouncycastle:bcpkix-jdk15on Dependency in Bamboo Data Center CVE-2026-17607: Encryption Failure - CVSS Score: 8.7 High - Vulnerability Description: org.bouncycastle:bcpkix-jdk15on Dependency in Bamboo Data Center Additional Information Vulnerability Source: Discovered through Bug Bounty programs, penetration testing processes, and third-party library scanning More Information: Visit the Vulnerability Disclosure Portal to view CVE or product version information

Goal Reached Thanks to every supporter — we hit 100%!

Atlassian Bamboo/Confluence High-Severity Vulnerability Patch Guide (RCE/DoS)