Known Exploited Vulnerabilities October 15, 2026 · CISA KEV Catalog

CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Atlassian CVE-2026-21589
Related: CVE-2021-26086: Atlassian Jira Server and Data Center Path Traversal Vulnerability Known Exploited Vulnerabilities · Nov 12, 2024
CVE-2023-22527: Atlassian Confluence Data Center and Server Template Injection Vulnerability Known Exploited Vulnerabilities · Jan 24, 2024
CVE-2023-22518: Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Known Exploited Vulnerabilities · Nov 07, 2023