<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-08T17:32:17.890409+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2125d022-38f8-4871-8b17-e40552251a34/export</id>
    <title>2125d022-38f8-4871-8b17-e40552251a34</title>
    <updated>2026-10-08T17:32:17.916796+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2125d022-38f8-4871-8b17-e40552251a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3mxewmsp4zn62", "content": "Oh, Atlassian, never change! \ud83d\ude2d\n\n\"CVE-2026-21589 - Arbitrary File Access Vulnerability impacts Multiple Products\"\n\nCVSS Score 9.3, so, you know, you better \"Test that your rule blocks .. immediately adjacent to /\".\n\nAPT /../../../../../../etc/passwd strikes again [\u2026]", "creation_timestamp": "2026-10-08T16:59:01.006661Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2125d022-38f8-4871-8b17-e40552251a34/export"/>
    <published>2026-10-08T16:59:01.006661+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c1131c73-f519-4705-8339-ec567e74f2d4/export</id>
    <title>c1131c73-f519-4705-8339-ec567e74f2d4</title>
    <updated>2026-10-08T17:32:17.918843+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c1131c73-f519-4705-8339-ec567e74f2d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://mstdn.social/users/jschauma/statuses/117406347153343214", "content": "Oh, Atlassian, never change! \ud83d\ude2d\n\"CVE-2026-21589 - Arbitrary File Access Vulnerability impacts Multiple Products\"\nCVSS Score 9.3, so, you know, you better \"Test that your rule blocks .. immediately adjacent to /\".\nAPT /../../../../../../etc/passwd strikes again.\nhttps://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html", "creation_timestamp": "2026-10-08T16:58:55.231406Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c1131c73-f519-4705-8339-ec567e74f2d4/export"/>
    <published>2026-10-08T16:58:55.231406+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d2b76a01-29c8-4224-91f3-2c7ea1da7e78/export</id>
    <title>d2b76a01-29c8-4224-91f3-2c7ea1da7e78</title>
    <updated>2026-10-08T17:32:17.918999+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d2b76a01-29c8-4224-91f3-2c7ea1da7e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/117406225430409564", "content": "Irre IT-Welt: Atlassian Schwachstelle CVE-2026-21589 bereits nach 2 Stunden angegriffen, Nius zum 4. Mal seit Sommer 2025 gehackt, jetzt liegen die Daten von Abonnenten etc. offen. Es gab einen ccTLD-Registry-Hack von drei L\u00e4ndern, und mehr.\nhttps://borncity.com/blog/2026/10/08/sicherheitssplitter-atlassian-cve-2026-21589-nius-leak-cctld-registry-hacks-etc/", "creation_timestamp": "2026-10-08T16:29:36.557842Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d2b76a01-29c8-4224-91f3-2c7ea1da7e78/export"/>
    <published>2026-10-08T16:29:36.557842+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b19ce4bd-f283-47f8-8773-1be5994f29af/export</id>
    <title>b19ce4bd-f283-47f8-8773-1be5994f29af</title>
    <updated>2026-10-08T17:32:17.919130+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b19ce4bd-f283-47f8-8773-1be5994f29af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mxeutdhhk22e", "content": "Irre IT-Welt: Atlassian Schwachstelle CVE-2026-21589 bereits nach 2 Stunden angegriffen, Nius zum 4. Mal seit Sommer 2025 gehackt, jetzt liegen die Daten von Abonnenten etc. offen. Es gab einen ccTLD-Registry-Hack von drei L\u00e4ndern, und mehr.\n\nborncity.com/blog/2026/10...", "creation_timestamp": "2026-10-08T16:26:47.072495Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b19ce4bd-f283-47f8-8773-1be5994f29af/export"/>
    <published>2026-10-08T16:26:47.072495+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/61aa2253-6335-4aec-a4ba-44b4d50a605a/export</id>
    <title>61aa2253-6335-4aec-a4ba-44b4d50a605a</title>
    <updated>2026-10-08T17:32:17.919248+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "61aa2253-6335-4aec-a4ba-44b4d50a605a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/sipirtu.com/post/3mxepdjkm4e24", "content": "Threat actors have begun targeting CVE-2026-21589, a critical vulnerability in Atlassian's self-hosted Data Center products, within hours of a proof-of-concept publication.\n\nSource: SecurityWeek", "creation_timestamp": "2026-10-08T14:48:27.542251Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/61aa2253-6335-4aec-a4ba-44b4d50a605a/export"/>
    <published>2026-10-08T14:48:27.542251+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9b629255-c550-4106-8b5f-292c9da6a906/export</id>
    <title>9b629255-c550-4106-8b5f-292c9da6a906</title>
    <updated>2026-10-08T17:32:17.919365+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9b629255-c550-4106-8b5f-292c9da6a906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxeobwnogr2r", "content": "Threat actors exploit CVE-2026-21589 in Atlassian Data Center products to read specific root files, with heightened impact when Jira integrates with Crowd credentials.\n", "creation_timestamp": "2026-10-08T14:29:40.073888Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9b629255-c550-4106-8b5f-292c9da6a906/export"/>
    <published>2026-10-08T14:29:40.073888+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a52206f9-c993-4500-84b4-e090370e2002/export</id>
    <title>a52206f9-c993-4500-84b4-e090370e2002</title>
    <updated>2026-10-08T17:32:17.919464+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a52206f9-c993-4500-84b4-e090370e2002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxeobpcuig2h", "content": "Threat actors exploit CVE-2026-21589 in Atlassian Data Center products to read specific root files, with heightened impact when Jira integrates with Crowd credentials.\n", "creation_timestamp": "2026-10-08T14:29:32.383873Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a52206f9-c993-4500-84b4-e090370e2002/export"/>
    <published>2026-10-08T14:29:32.383873+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/51ef13a0-3190-43ae-ae31-d455cacfe3f6/export</id>
    <title>51ef13a0-3190-43ae-ae31-d455cacfe3f6</title>
    <updated>2026-10-08T17:32:17.919572+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "51ef13a0-3190-43ae-ae31-d455cacfe3f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxeo5igodk2y", "content": "Threat actors exploit CVE-2026-21589 in Atlassian Data Center products to read specific root files, with heightened impact when Jira integrates with Crowd credentials.\n", "creation_timestamp": "2026-10-08T14:27:10.834172Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/51ef13a0-3190-43ae-ae31-d455cacfe3f6/export"/>
    <published>2026-10-08T14:27:10.834172+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ff214e43-c063-4bdd-9f06-9391904b4941/export</id>
    <title>ff214e43-c063-4bdd-9f06-9391904b4941</title>
    <updated>2026-10-08T17:32:17.919670+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ff214e43-c063-4bdd-9f06-9391904b4941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/yetikamp.bsky.social/post/3mxen3xqmdw2p", "content": "CVE-2026-21589 in Atlassian products allows arbitrary code execution. If you cannot verify immediate vendor remediation, isolate affected instances and monitor for anomalous outbound connections.", "creation_timestamp": "2026-10-08T14:08:25.426133Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ff214e43-c063-4bdd-9f06-9391904b4941/export"/>
    <published>2026-10-08T14:08:25.426133+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4caec4b8-9629-4825-8e61-b18251437af3/export</id>
    <title>4caec4b8-9629-4825-8e61-b18251437af3</title>
    <updated>2026-10-08T17:32:17.919776+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4caec4b8-9629-4825-8e61-b18251437af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxei733mrc24", "content": "Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)\n\nOn October 5th, Atlassian published patches&amp;#;x26;#;xc2;&amp;#;x26;#;xa0;for multiple products to fix an \"Arbitrary File Access\" vulnerability &amp;#;x26;#;x5b;CVE-2026-21589&amp;#;x26;#;x5d;. An attacker can read arbitrary fi\u2026\n#hackernews #news", "creation_timestamp": "2026-10-08T12:40:41.743557Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4caec4b8-9629-4825-8e61-b18251437af3/export"/>
    <published>2026-10-08T12:40:41.743557+00:00</published>
  </entry>
</feed>
