{"vulnerability": "cve-2026-7725", "sightings": [{"uuid": "7a6f91ba-149f-453d-bae2-e6663c989195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7725", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkz4b64huq2p", "content": "CVE-2026-7725 - PrefectHQ prefect GitRepository Pull storage.py argument injection\nCVE ID : CVE-2026-7725\n \n Published : May 4, 2026, 5:16 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : A vulnerability was found in PrefectHQ prefect up to 3.6.25.dev6. Affected by this issue is ...", "creation_timestamp": "2026-05-04T07:05:29.723763Z"}, {"uuid": "8d49500e-8395-46af-8c6e-306483ed3c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77254", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4yq67mxx2w", "content": "CVE-2026-77254 - mcp-atlassian\nThe MCP Atlassian server for Confluence and Jira accepted HTTP requests without verifying the caller\u2019s identity, then used the system\u2019s global credentials. This lets\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mcpatlassian #sooperset #CVE #infosec", "creation_timestamp": "2026-09-22T19:50:05.151949Z"}, {"uuid": "8923dea4-717f-4340-856a-c008f066ea07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77254", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mw4zqncn772q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-77254: MCP Atlassian: Unauthenticated HTTP MCP requests can use globally configured Jira and Confluence credentials\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-77254\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-22T20:08:14.563273Z"}, {"uuid": "84a245a4-1891-4b35-a46a-e5720ab72c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77254", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw4zzsmkdm2f", "content": "\ud83d\udea8 CVE-2026-77254 \u2014 CVSS 9.1 CRITICAL\n\nMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77254\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T20:13:22.245681Z"}, {"uuid": "63b09c8c-e0f0-4f99-989f-a2e3dcbe9345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-77258", "type": "published-proof-of-concept", "source": "https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-93xw-j965-9mx3", "content": "", "creation_timestamp": "2026-09-22T22:35:33.689747Z"}, {"uuid": "25a81d46-6b2d-4698-a29d-d447f3ac3a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77257", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ihwdfyujuvoxe", "content": "CVE-2026-77257 - MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths\nCVE ID : CVE-2026-77257\n \n Published : Sept. 22, 2026, 7:16 p.m. | 42\u00a0minutes ago\n \n Description : MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluen...", "creation_timestamp": "2026-09-22T20:34:52.127386Z"}, {"uuid": "0b650c00-6f90-4c3e-b027-352177ce3ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-77250", "type": "published-proof-of-concept", "source": "https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-g5xv-mhgm-v5f6", "content": "", "creation_timestamp": "2026-09-22T22:35:35.625915Z"}, {"uuid": "811823a7-3bef-449f-b97f-26682de6573f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77256", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jvhchavzcxfyx", "content": "CVE-2026-77256 - MCP Atlassian: OAuth refresh-token backup file is world-readable under default Unix umask\nCVE ID : CVE-2026-77256\n \n Published : Sept. 22, 2026, 7:16 p.m. | 42\u00a0minutes ago\n \n Description : MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian pr...", "creation_timestamp": "2026-09-22T20:40:52.059294Z"}, {"uuid": "30a1a6ba-1e79-4304-be0c-2b0ebb28e299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-77259", "type": "published-proof-of-concept", "source": "https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6cr4-ccf3-x7h4", "content": "", "creation_timestamp": "2026-09-22T22:35:51.015498Z"}, {"uuid": "200437be-1b0c-47a1-8b6c-fafd205575ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-77257", "type": "published-proof-of-concept", "source": "https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-mrq8-fv7v-hhjg", "content": "", "creation_timestamp": "2026-09-22T22:36:05.022868Z"}, {"uuid": "4b544c6f-5df5-4b46-8b73-e2e1142690f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-77253", "type": "published-proof-of-concept", "source": "https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-vc25-24vv-fxxm", "content": "", "creation_timestamp": "2026-09-22T22:36:10.881233Z"}, {"uuid": "4b70bd4e-f22d-4275-b267-abb91481826c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-77255", "type": "published-proof-of-concept", "source": "https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-2xj6-xx86-cwwc", "content": "", "creation_timestamp": "2026-09-22T22:36:08.935090Z"}, {"uuid": "fed4d7cd-4cc1-4689-8089-c0211cdadc69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-77251", "type": "published-proof-of-concept", "source": "https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-w66g-j6c4-hcfc", "content": "", "creation_timestamp": "2026-09-22T22:36:12.797011Z"}, {"uuid": "ffb0b088-0796-40bb-a6a6-09f3f7628b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77254", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwnbedkeno2a", "content": "\ud83d\udccc CVE-2026-77254 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, requests to the HTTP MCP endpoin... https://www.cyberhub.blog/cves/CVE-2026-77254", "creation_timestamp": "2026-09-29T07:07:07.702429Z"}, {"uuid": "a87bcac1-85dc-4c80-acfc-3b8020be5697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77256", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwnqh4be2t23", "content": "\ud83d\udccc CVE-2026-77256 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the plaintext OAuth fallback fil... https://www.cyberhub.blog/cves/CVE-2026-77256", "creation_timestamp": "2026-09-29T11:37:06.963703Z"}]}