{"uuid": "8d49500e-8395-46af-8c6e-306483ed3c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77254", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4yq67mxx2w", "content": "CVE-2026-77254 - mcp-atlassian\nThe MCP Atlassian server for Confluence and Jira accepted HTTP requests without verifying the caller\u2019s identity, then used the system\u2019s global credentials. This lets\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mcpatlassian #sooperset #CVE #infosec", "creation_timestamp": "2026-09-22T19:50:05.151949Z"}