CVE-2026-77262
8.6 · HighArbitrary file read in MCP Atlassian through confluence_upload_attachment
MCP Atlassian opened any file_path passed to its Confluence upload tool, so a caller could read host files and push them out as attachments.
Vulnerability class
Incomplete fix
An already patched vulnerability that survives on a neighbouring path: the other direction of an operation, another field of the same parameter.
2 write-ups, 2 vulnerabilities
CVE-2026-34049
3.3 · Low
Command injection in Coolify MongoDB backups, an incomplete fix of CVE-2025-66209
The CVE-2025-66209 fix escaped database names in Coolify backups but not MongoDB collection names, which still reached a root shell on the server.
Vulnerabilities
| Identifier | Product | Vulnerability | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-77262 | MCP Atlassian | Path traversal in confluence_upload_attachment | 8.6 High | |
| CVE-2026-34049 | Coolify | Command injection through MongoDB collection names in database backups | 3.3 Low |