<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 08 Oct 2026 17:32:18 +0000</lastBuildDate>
    <item>
      <title>2125d022-38f8-4871-8b17-e40552251a34</title>
      <link>https://vulnerability.circl.lu/sighting/2125d022-38f8-4871-8b17-e40552251a34/export</link>
      <description>{"uuid": "2125d022-38f8-4871-8b17-e40552251a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3mxewmsp4zn62", "content": "Oh, Atlassian, never change! \ud83d\ude2d\n\n\"CVE-2026-21589 - Arbitrary File Access Vulnerability impacts Multiple Products\"\n\nCVSS Score 9.3, so, you know, you better \"Test that your rule blocks .. immediately adjacent to /\".\n\nAPT /../../../../../../etc/passwd strikes again [\u2026]", "creation_timestamp": "2026-10-08T16:59:01.006661Z"}</description>
      <content:encoded>{"uuid": "2125d022-38f8-4871-8b17-e40552251a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3mxewmsp4zn62", "content": "Oh, Atlassian, never change! \ud83d\ude2d\n\n\"CVE-2026-21589 - Arbitrary File Access Vulnerability impacts Multiple Products\"\n\nCVSS Score 9.3, so, you know, you better \"Test that your rule blocks .. immediately adjacent to /\".\n\nAPT /../../../../../../etc/passwd strikes again [\u2026]", "creation_timestamp": "2026-10-08T16:59:01.006661Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2125d022-38f8-4871-8b17-e40552251a34/export</guid>
      <pubDate>Thu, 08 Oct 2026 16:59:01 +0000</pubDate>
    </item>
    <item>
      <title>c1131c73-f519-4705-8339-ec567e74f2d4</title>
      <link>https://vulnerability.circl.lu/sighting/c1131c73-f519-4705-8339-ec567e74f2d4/export</link>
      <description>{"uuid": "c1131c73-f519-4705-8339-ec567e74f2d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://mstdn.social/users/jschauma/statuses/117406347153343214", "content": "Oh, Atlassian, never change! \ud83d\ude2d\n\"CVE-2026-21589 - Arbitrary File Access Vulnerability impacts Multiple Products\"\nCVSS Score 9.3, so, you know, you better \"Test that your rule blocks .. immediately adjacent to /\".\nAPT /../../../../../../etc/passwd strikes again.\nhttps://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html", "creation_timestamp": "2026-10-08T16:58:55.231406Z"}</description>
      <content:encoded>{"uuid": "c1131c73-f519-4705-8339-ec567e74f2d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://mstdn.social/users/jschauma/statuses/117406347153343214", "content": "Oh, Atlassian, never change! \ud83d\ude2d\n\"CVE-2026-21589 - Arbitrary File Access Vulnerability impacts Multiple Products\"\nCVSS Score 9.3, so, you know, you better \"Test that your rule blocks .. immediately adjacent to /\".\nAPT /../../../../../../etc/passwd strikes again.\nhttps://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html", "creation_timestamp": "2026-10-08T16:58:55.231406Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c1131c73-f519-4705-8339-ec567e74f2d4/export</guid>
      <pubDate>Thu, 08 Oct 2026 16:58:55 +0000</pubDate>
    </item>
    <item>
      <title>d2b76a01-29c8-4224-91f3-2c7ea1da7e78</title>
      <link>https://vulnerability.circl.lu/sighting/d2b76a01-29c8-4224-91f3-2c7ea1da7e78/export</link>
      <description>{"uuid": "d2b76a01-29c8-4224-91f3-2c7ea1da7e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/117406225430409564", "content": "Irre IT-Welt: Atlassian Schwachstelle CVE-2026-21589 bereits nach 2 Stunden angegriffen, Nius zum 4. Mal seit Sommer 2025 gehackt, jetzt liegen die Daten von Abonnenten etc. offen. Es gab einen ccTLD-Registry-Hack von drei L\u00e4ndern, und mehr.\nhttps://borncity.com/blog/2026/10/08/sicherheitssplitter-atlassian-cve-2026-21589-nius-leak-cctld-registry-hacks-etc/", "creation_timestamp": "2026-10-08T16:29:36.557842Z"}</description>
      <content:encoded>{"uuid": "d2b76a01-29c8-4224-91f3-2c7ea1da7e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/117406225430409564", "content": "Irre IT-Welt: Atlassian Schwachstelle CVE-2026-21589 bereits nach 2 Stunden angegriffen, Nius zum 4. Mal seit Sommer 2025 gehackt, jetzt liegen die Daten von Abonnenten etc. offen. Es gab einen ccTLD-Registry-Hack von drei L\u00e4ndern, und mehr.\nhttps://borncity.com/blog/2026/10/08/sicherheitssplitter-atlassian-cve-2026-21589-nius-leak-cctld-registry-hacks-etc/", "creation_timestamp": "2026-10-08T16:29:36.557842Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d2b76a01-29c8-4224-91f3-2c7ea1da7e78/export</guid>
      <pubDate>Thu, 08 Oct 2026 16:29:36 +0000</pubDate>
    </item>
    <item>
      <title>b19ce4bd-f283-47f8-8773-1be5994f29af</title>
      <link>https://vulnerability.circl.lu/sighting/b19ce4bd-f283-47f8-8773-1be5994f29af/export</link>
      <description>{"uuid": "b19ce4bd-f283-47f8-8773-1be5994f29af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mxeutdhhk22e", "content": "Irre IT-Welt: Atlassian Schwachstelle CVE-2026-21589 bereits nach 2 Stunden angegriffen, Nius zum 4. Mal seit Sommer 2025 gehackt, jetzt liegen die Daten von Abonnenten etc. offen. Es gab einen ccTLD-Registry-Hack von drei L\u00e4ndern, und mehr.\n\nborncity.com/blog/2026/10...", "creation_timestamp": "2026-10-08T16:26:47.072495Z"}</description>
      <content:encoded>{"uuid": "b19ce4bd-f283-47f8-8773-1be5994f29af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mxeutdhhk22e", "content": "Irre IT-Welt: Atlassian Schwachstelle CVE-2026-21589 bereits nach 2 Stunden angegriffen, Nius zum 4. Mal seit Sommer 2025 gehackt, jetzt liegen die Daten von Abonnenten etc. offen. Es gab einen ccTLD-Registry-Hack von drei L\u00e4ndern, und mehr.\n\nborncity.com/blog/2026/10...", "creation_timestamp": "2026-10-08T16:26:47.072495Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b19ce4bd-f283-47f8-8773-1be5994f29af/export</guid>
      <pubDate>Thu, 08 Oct 2026 16:26:47 +0000</pubDate>
    </item>
    <item>
      <title>61aa2253-6335-4aec-a4ba-44b4d50a605a</title>
      <link>https://vulnerability.circl.lu/sighting/61aa2253-6335-4aec-a4ba-44b4d50a605a/export</link>
      <description>{"uuid": "61aa2253-6335-4aec-a4ba-44b4d50a605a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/sipirtu.com/post/3mxepdjkm4e24", "content": "Threat actors have begun targeting CVE-2026-21589, a critical vulnerability in Atlassian's self-hosted Data Center products, within hours of a proof-of-concept publication.\n\nSource: SecurityWeek", "creation_timestamp": "2026-10-08T14:48:27.542251Z"}</description>
      <content:encoded>{"uuid": "61aa2253-6335-4aec-a4ba-44b4d50a605a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/sipirtu.com/post/3mxepdjkm4e24", "content": "Threat actors have begun targeting CVE-2026-21589, a critical vulnerability in Atlassian's self-hosted Data Center products, within hours of a proof-of-concept publication.\n\nSource: SecurityWeek", "creation_timestamp": "2026-10-08T14:48:27.542251Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/61aa2253-6335-4aec-a4ba-44b4d50a605a/export</guid>
      <pubDate>Thu, 08 Oct 2026 14:48:27 +0000</pubDate>
    </item>
    <item>
      <title>9b629255-c550-4106-8b5f-292c9da6a906</title>
      <link>https://vulnerability.circl.lu/sighting/9b629255-c550-4106-8b5f-292c9da6a906/export</link>
      <description>{"uuid": "9b629255-c550-4106-8b5f-292c9da6a906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxeobwnogr2r", "content": "Threat actors exploit CVE-2026-21589 in Atlassian Data Center products to read specific root files, with heightened impact when Jira integrates with Crowd credentials.\n", "creation_timestamp": "2026-10-08T14:29:40.073888Z"}</description>
      <content:encoded>{"uuid": "9b629255-c550-4106-8b5f-292c9da6a906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxeobwnogr2r", "content": "Threat actors exploit CVE-2026-21589 in Atlassian Data Center products to read specific root files, with heightened impact when Jira integrates with Crowd credentials.\n", "creation_timestamp": "2026-10-08T14:29:40.073888Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9b629255-c550-4106-8b5f-292c9da6a906/export</guid>
      <pubDate>Thu, 08 Oct 2026 14:29:40 +0000</pubDate>
    </item>
    <item>
      <title>a52206f9-c993-4500-84b4-e090370e2002</title>
      <link>https://vulnerability.circl.lu/sighting/a52206f9-c993-4500-84b4-e090370e2002/export</link>
      <description>{"uuid": "a52206f9-c993-4500-84b4-e090370e2002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxeobpcuig2h", "content": "Threat actors exploit CVE-2026-21589 in Atlassian Data Center products to read specific root files, with heightened impact when Jira integrates with Crowd credentials.\n", "creation_timestamp": "2026-10-08T14:29:32.383873Z"}</description>
      <content:encoded>{"uuid": "a52206f9-c993-4500-84b4-e090370e2002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxeobpcuig2h", "content": "Threat actors exploit CVE-2026-21589 in Atlassian Data Center products to read specific root files, with heightened impact when Jira integrates with Crowd credentials.\n", "creation_timestamp": "2026-10-08T14:29:32.383873Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a52206f9-c993-4500-84b4-e090370e2002/export</guid>
      <pubDate>Thu, 08 Oct 2026 14:29:32 +0000</pubDate>
    </item>
    <item>
      <title>51ef13a0-3190-43ae-ae31-d455cacfe3f6</title>
      <link>https://vulnerability.circl.lu/sighting/51ef13a0-3190-43ae-ae31-d455cacfe3f6/export</link>
      <description>{"uuid": "51ef13a0-3190-43ae-ae31-d455cacfe3f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxeo5igodk2y", "content": "Threat actors exploit CVE-2026-21589 in Atlassian Data Center products to read specific root files, with heightened impact when Jira integrates with Crowd credentials.\n", "creation_timestamp": "2026-10-08T14:27:10.834172Z"}</description>
      <content:encoded>{"uuid": "51ef13a0-3190-43ae-ae31-d455cacfe3f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxeo5igodk2y", "content": "Threat actors exploit CVE-2026-21589 in Atlassian Data Center products to read specific root files, with heightened impact when Jira integrates with Crowd credentials.\n", "creation_timestamp": "2026-10-08T14:27:10.834172Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/51ef13a0-3190-43ae-ae31-d455cacfe3f6/export</guid>
      <pubDate>Thu, 08 Oct 2026 14:27:10 +0000</pubDate>
    </item>
    <item>
      <title>ff214e43-c063-4bdd-9f06-9391904b4941</title>
      <link>https://vulnerability.circl.lu/sighting/ff214e43-c063-4bdd-9f06-9391904b4941/export</link>
      <description>{"uuid": "ff214e43-c063-4bdd-9f06-9391904b4941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/yetikamp.bsky.social/post/3mxen3xqmdw2p", "content": "CVE-2026-21589 in Atlassian products allows arbitrary code execution. If you cannot verify immediate vendor remediation, isolate affected instances and monitor for anomalous outbound connections.", "creation_timestamp": "2026-10-08T14:08:25.426133Z"}</description>
      <content:encoded>{"uuid": "ff214e43-c063-4bdd-9f06-9391904b4941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/yetikamp.bsky.social/post/3mxen3xqmdw2p", "content": "CVE-2026-21589 in Atlassian products allows arbitrary code execution. If you cannot verify immediate vendor remediation, isolate affected instances and monitor for anomalous outbound connections.", "creation_timestamp": "2026-10-08T14:08:25.426133Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ff214e43-c063-4bdd-9f06-9391904b4941/export</guid>
      <pubDate>Thu, 08 Oct 2026 14:08:25 +0000</pubDate>
    </item>
    <item>
      <title>4caec4b8-9629-4825-8e61-b18251437af3</title>
      <link>https://vulnerability.circl.lu/sighting/4caec4b8-9629-4825-8e61-b18251437af3/export</link>
      <description>{"uuid": "4caec4b8-9629-4825-8e61-b18251437af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxei733mrc24", "content": "Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)\n\nOn October 5th, Atlassian published patches&amp;#;x26;#;xc2;&amp;#;x26;#;xa0;for multiple products to fix an \"Arbitrary File Access\" vulnerability &amp;#;x26;#;x5b;CVE-2026-21589&amp;#;x26;#;x5d;. An attacker can read arbitrary fi\u2026\n#hackernews #news", "creation_timestamp": "2026-10-08T12:40:41.743557Z"}</description>
      <content:encoded>{"uuid": "4caec4b8-9629-4825-8e61-b18251437af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxei733mrc24", "content": "Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)\n\nOn October 5th, Atlassian published patches&amp;#;x26;#;xc2;&amp;#;x26;#;xa0;for multiple products to fix an \"Arbitrary File Access\" vulnerability &amp;#;x26;#;x5b;CVE-2026-21589&amp;#;x26;#;x5d;. An attacker can read arbitrary fi\u2026\n#hackernews #news", "creation_timestamp": "2026-10-08T12:40:41.743557Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4caec4b8-9629-4825-8e61-b18251437af3/export</guid>
      <pubDate>Thu, 08 Oct 2026 12:40:41 +0000</pubDate>
    </item>
  </channel>
</rss>
