<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: sooperset-mcp-atlassian</title><description>Every new CVE for sooperset-mcp-atlassian.</description><link>https://agentprime.io/</link><item><title>CVE-2026-77256: MCP Atlassian: OAuth refresh-token backup file is world-readable under default Unix umask</title><link>https://agentprime.io/advisories/CVE-2026-77256/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77256/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 18:48:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-77254: MCP Atlassian: Unauthenticated HTTP MCP requests can use globally configured Jira and Confluence credentials</title><link>https://agentprime.io/advisories/CVE-2026-77254/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77254/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 18:11:44 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-77242: MCP Atlassian: Incomplete fix for CVE-2026-27826: DNS rebinding bypasses SSRF validation (validated IP not pinned)</title><link>https://agentprime.io/advisories/CVE-2026-77242/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77242/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 17:58:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-77252: MCP Atlassian: JIRA_PROJECTS_FILTER and CONFLUENCE_SPACES_FILTER can be bypassed in search tools</title><link>https://agentprime.io/advisories/CVE-2026-77252/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77252/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Sep 2026 17:54:02 GMT</pubDate><category>CVE</category></item></channel></rss>