Are you affected? Recent vulnerabilities in e-Mudhra, PHP, Node.js and Linux kernel ksmbd

Rohan Jha

Hello Community team,

Does anyone know if Atlassian products (JIRAm confluence) are affected by the below?

Several critical vulnerabilities were recently discovered in e-Mudhra, PHP, Node.js and the Linux kernel ksmbd component. We would like to confirm whether [Product/Service Name, version] is affected by any of them:

1. e-Mudhra: compromise of eight emSign intermediate CA keys (six TLS, two code-signing)
   Related CVEs: CVE-2026-111943, CVE-2026-113470, CVE-2026-115557, CVE-2026-114820
2. PHP ("PHP2Shell"): unauthenticated remote code execution, CVSS 9.2
   CVE-2026-109618, CVE-2026-109619; fixed in PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35
3. Node.js: October 2026 security release, including a Brotli decoder RCE
   CVE-2026-111497, CVE-2026-105482, CVE-2026-105483, CVE-2026-106069 and others; fixed in 22.23.4, 24.22.1, 26.12.1
4. Linux kernel ksmbd: two critical RCE flaws, CVSS 9.0
   ZDI-CAN-33774, ZDI-CAN-33549 (no CVE assigned yet; no mainline fix at the time of writing)

Arkadiusz Wroblewski

Hello @Rohan Jha

Atlassian has already confirmed that its investigation into PHP2Shell found no evidence of impact to Atlassian products or customer data.

I haven't found an official Atlassian impact statement for e-Mudhra, Node.js, or ksmbd. Which Cloud or Data Center versions are you using? For a confirmed assessment, contact Atlassian Support or monitor their advisories.
https://www.atlassian.com/trust/security/advisories

Cheers,
Arek🤠🧙‍♂️