{"vulnerability": "cve-2026-21589", "sightings": [{"uuid": "760846c6-6d3e-499e-a86e-a7dfdf32ce15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx6574gbkm2n", "content": "\ud83d\udea8 CVE-2026-21589 \u2014 CVSS 9.3 CRITICAL\n\nh3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Manageme...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-21589\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T00:07:53.344480Z"}, {"uuid": "102aab6b-d922-48f7-bd3a-bc942b598a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117391374738254219", "content": "CVE-2026-21589 (CRITICAL, CVSS 9.3) in Atlassian Bamboo Data Center <10.2.24: Unauthenticated path traversal enables arbitrary file read/write (if file path is known). Patch to 10.2.24+ required \u2014 no workarounds. Details: https://radar.offseq.com/threat/cve-2026-21589-path-traversal-arbitrary-readwrite-in-atlassian-bamboo-data-center-24a2d0e4e6de8f44 #OffSeq #Atlassian #Infosec", "creation_timestamp": "2026-10-06T01:30:25.605340Z"}, {"uuid": "22efb193-e04d-4597-b720-992822d524f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx6bsr32vl2y", "content": "Atlassian Bamboo Data Center <10.2.24 is affected by CRITICAL path traversal (CVE-2026-21589). Unauthenticated attackers can read/write files if the path is known. Patch now: https://radar.offseq.com/threat/cve-2026-21589-path-traversal-arbitrary-readwrite-in-atlassian-bamboo-data-center-24a2d0e4...", "creation_timestamp": "2026-10-06T01:30:27.822027Z"}, {"uuid": "cda9a443-0d07-41b5-90fc-e74685c9fad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mx6dwqbw2c22", "content": "Atlassian Data Center vulnerability CVE-2026-21589 (CVSS 9.3) allows arbitrary file access in Jira, Confluence and Bitbucket. Patch now.\n\n#Atlassian #Jira #Confluence #Bitbucket #CVE202621589 #PathTraversal #DataCenter #Vulnerability", "creation_timestamp": "2026-10-06T02:08:28.751740Z"}, {"uuid": "4c183c9f-a1b5-4eae-ab4c-e78fa67bad16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx6wh2hvri2i", "content": "Atlassian\u88fd\u54c1\u306e\u8106\u5f31\u6027\u300cCVE-2026-21589\u300d\u3001Jira\u30fbConfluence Data Center\u3067\u30d5\u30a1\u30a4\u30eb\u304c\u9732\u51fa\n\nAtlassian\u306f\u3001\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u306b\u95a2\u308f\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306fJira Software Data Center\u3068Confluence Data Center\u306b\u5f71\u97ff\u3057\u307e\u3059\u3002 \u300cCVE-2026-21589\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001CVSS\u30b9\u30b3\u30a2\u304c9.3\u3067\u3059\u3002\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483", "creation_timestamp": "2026-10-06T07:39:43.007182Z"}, {"uuid": "5b1e52a7-6a25-4347-a8f1-713c6a6fd037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mx6wq5oa6227", "content": "CVE-2026-21589 lets unauthenticated attackers read specific files from Atlassian Data Center web roots, requiring known paths, and requires upgrading or restricting access.\n", "creation_timestamp": "2026-10-06T07:44:49.502033Z"}, {"uuid": "8951f672-78a3-4eee-9c16-6b4e3cf9d040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mx6wqsdhmf2t", "content": "CVE-2026-21589 lets unauthenticated attackers read specific files from Atlassian Data Center web roots, requiring known paths, and requires upgrading or restricting access.\n", "creation_timestamp": "2026-10-06T07:45:10.370618Z"}, {"uuid": "42756456-70d3-472c-b83d-69dccb17706d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mx6wqwvacp2m", "content": "CVE-2026-21589 lets unauthenticated attackers read specific files from Atlassian Data Center web roots, requiring known paths, and requires upgrading or restricting access.\n", "creation_timestamp": "2026-10-06T07:45:15.095380Z"}, {"uuid": "e1b38d37-3a13-44a9-b816-52c4ec60b531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://t.me/thehackernews/10249", "content": "\u203c\ufe0f A critical Atlassian vulnerability rated CVSS 9.3 affects 8 Data Center products.\n\nCVE-2026-21589 can let unauthenticated attackers read specific files if they know the exact file path. Internet-facing instances should be upgraded or restricted.\n\nDetails - https://thehackernews.com/2026/10/critical-atlassian-flaw-lets.html", "creation_timestamp": "2026-10-06T07:10:27.000000Z"}, {"uuid": "3cd645e0-9157-4077-8fdd-30b077f8894b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mx6xy42reb2n", "content": "Atlassian Patches CVE-2026-21589: Path Traversal Hits 8 Data Center Products at CVSS 9.3", "creation_timestamp": "2026-10-06T08:07:09.480916Z"}, {"uuid": "05c02f19-4bb0-4d55-8ad7-b041636c808d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mx6zqc2xgj2q", "content": "\ud83e\udd16 CVE-2026-21589 (CVSS 9.3): unauthenticated file read in 8 self-hosted Atlassian Data Center products. Needs a file's exact name/path, no dir listing. Fixed versions out \u2014 restrict public access until upgrade.\nhttps://thehackernews.com/2026/10/critical-atlassian-flaw-lets.html", "creation_timestamp": "2026-10-06T08:38:34.139272Z"}, {"uuid": "7eccb3ce-32a1-4363-8d89-63022fa448dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117393139954881746", "content": "Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products\nA critical flaw (CVE-2026-21589, CVSS 9.3) in eight Atlassian Data Center products allows an unauthenticated attacker to read known files from each product\u2019s web application root directory. The attacker must know a file\u2019s exact name and path; listing directory contents is not possible. Atlassian disclosed the issue on October 5 and urges customers to patch. https://thehackernews.com/2026/10/critical-atlassian-flaw-lets.html", "creation_timestamp": "2026-10-06T08:59:20.498922Z"}, {"uuid": "dcc77b46-7764-4151-a893-b8e0f363fc9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mx72vhhefg26", "content": "Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products\n\nA critical flaw (CVE-2026-21589, CVSS 9.3) in eight Atlassian Data Center products allows an unauthenticated attacker to r... https://threatintel.cc/2026/10/06/critical-atlassian-flaw-lets-unauthenticated.html", "creation_timestamp": "2026-10-06T08:59:21.237831Z"}, {"uuid": "f121f4a2-01e4-462f-b872-457ce78e22c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/17316", "content": "Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center \u2013 gbhackers.com\n\nTue, 06 Oct 2026 15:29:01", "creation_timestamp": "2026-10-06T08:04:24.000000Z"}, {"uuid": "ac67186e-2995-4186-a236-c56d8c75f536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/26710", "content": "Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center \u2013 gbhackers.com\n\nTue, 06 Oct 2026 15:29:01", "creation_timestamp": "2026-10-06T08:04:24.000000Z"}, {"uuid": "5ac3b616-e9ec-4f30-9f49-427f509eb6a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/15501", "content": "Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center \u2013 gbhackers.com\n\nTue, 06 Oct 2026 15:29:01", "creation_timestamp": "2026-10-06T08:04:25.000000Z"}, {"uuid": "17deeb14-64fd-4bdc-8e2f-ead1cbfaf6bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mx73cxnpkm2m", "content": "Critical Atlassian flaw CVE-2026-21589 patched\u2014update Jira, Confluence, Bitbucket asap. #SecurityNews #Atlassian #CVE2026-21589 #Vulnerability #InfoSec #Cybersecurity https://thedailytechfeed.com/atlassian-rushes-out-fixes-for-critical-file-access-exploit/", "creation_timestamp": "2026-10-06T09:06:55.415528Z"}, {"uuid": "af2d870f-e851-48c4-be61-a0b3f1b691d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mx775luty526", "content": "Atlassian disclosed CVE-2026-21589, a critical path traversal flaw in 8 Data Center products that can let unauthenticated attackers read known files from the web root. #Atlassian #CVE202621589 #Jira", "creation_timestamp": "2026-10-06T10:15:29.642025Z"}, {"uuid": "e3089269-c2d8-4cda-97b1-a8bc43b43de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mx7gp5jofk2y", "content": "Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/10/06/a...\n\n#Atlassian #vulnerability #cybersecurity", "creation_timestamp": "2026-10-06T12:30:37.120791Z"}, {"uuid": "5bd31e95-46ed-4d0f-9c62-bd11c26c1a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx7ha7a23h2n", "content": "Atlassian\u3001Data Center\u306e\u91cd\u5927\u306a\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u8106\u5f31\u6027\uff08CVE-2026-21589\uff09\u3067\u76f4\u3061\u306b\u30d1\u30c3\u30c1\u9069\u7528\u3092\u547c\u3073\u304b\u3051\n\nAtlassian\u306f\u3001\u4fdd\u5b58\u5834\u6240\u3092\u77e5\u3063\u3066\u3044\u308b\u653b\u6483\u8005\u304c\u30ed\u30b0\u30a4\u30f3\u306a\u3057\u3067Atlassian Data Center\u74b0\u5883\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308c\u308b\u3068\u3057\u3066\u3001\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u307e\u3059\u3002 CVE-2026-21589\u306e\u6982\u8981 CVE-2026-21589\u306f\u3001CVSS\u30b9\u30b3\u30a29.3\u306e\u91cd\u5927\u306a\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u306e\u8106\u5f31\u6027\u3067\u3059\u3002Bi", "creation_timestamp": "2026-10-06T12:40:06.564375Z"}, {"uuid": "e37784b9-ddc0-4717-95ec-464f6b8913a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mx7hp3mpnu22", "content": "Atlassian has issued a critical security alert regarding CVE-2026-21589, a 9.3-rated arbitrary file access vulnerability in its datacenter products, including Bitbucket, Confluence, and Jira.", "creation_timestamp": "2026-10-06T12:48:27.154536Z"}, {"uuid": "3530ccc5-84bb-4875-a1e6-763fa3960be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mx7hu25ykx2w", "content": "Critical Atlassian Flaw (CVE-2026-21589) Exposes Files Across Jira, Confluence, Bitbucket, and 5 More Products: Unauthenticated Attackers\u00a0Affected\n\nCVE-2026-21589 is a critical Atlassian path traversal flaw rated CVSS\u2026\n\nhttps://thecybersecguru.com/exploits/cve-2026-21589-atlassian-vulnerability/", "creation_timestamp": "2026-10-06T12:51:12.748709Z"}, {"uuid": "f8dde552-58e2-421d-942b-7b1ec60d5c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mx7hwsta4k2o", "content": "Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)\n\nwww.helpnetsecurity.com/2026/10/06/a...\n\n#Kyberturvallisuus #LaajaVaikutus #Haavoittuvuus", "creation_timestamp": "2026-10-06T12:52:46.802866Z"}, {"uuid": "9612ab65-a5ab-4d67-af36-f78f06c6e963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mx7iw6l5fd24", "content": "\ud83d\udd17 CVE : CVE-2019-13990, CVE-2022-1471, CVE-2022-23521, CVE-2022-41903, CVE-2023-22518, CVE-2023-22522, CVE-2023-22523, CVE-2023-22524, CVE-2023-22527, CVE-2023-46604, CVE-2026-21589", "creation_timestamp": "2026-10-06T13:10:17.839620Z"}, {"uuid": "24f13c65-bf15-4032-9767-038541c255e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mx7mkco2e42s", "content": "Atlassian patches CVE-2026-21589 (CVSS 9.3): unauthenticated path traversal across 8 Data Center products. Patches out Oct 6. #infosec https://0daynews.com/articles/2026-10-06-atlassian-cve-2026-21589-path-traversal-8-products/", "creation_timestamp": "2026-10-06T14:15:14.724208Z"}, {"uuid": "5d67c734-a416-487a-98e9-c54d0ef599e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mx7nege67z23", "content": "Atlassian patches critical arbitrary file access flaw (CVE-2026-21589) in Jira, Confluence, & more. Rated 9.3 CVSS, it allows unauthenticated access to web root files. #Atlassian #Jira #Confluence #Vulnerability #CVE202621589\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-10-06T14:29:51.202441Z"}, {"uuid": "6e0a3c3d-3561-4f61-9aba-2e5b49cd6de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mx7sqrabb72o", "content": "~Cybergcca~\nUpdate Atlassian products for arbitrary file access and apply Android\u2019s October security rollup.\n-\nIOCs: CVE-2026-21589\n-\n#Android #CVE-2026-21589 #ThreatIntel", "creation_timestamp": "2026-10-06T16:06:13.563449Z"}, {"uuid": "b31e11be-7240-4ff1-9983-700ae8d790cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/atlassian-security-advisory-av26-1002", "content": "", "creation_timestamp": "2026-10-06T06:44:05.000000Z"}, {"uuid": "9635a204-ff55-4775-96dc-fcda1044f04e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "Telegram/LoTGJwSdJ9EUN-9zxAbBV4yPateFOBlMwANgBNI9_Qj9bw", "content": "", "creation_timestamp": "2026-10-06T10:31:42.000000Z"}, {"uuid": "43554e57-9537-4368-b01c-941f7cbd1833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mx7x4r5t2u2g", "content": "You Won\u2019t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) - watchTowr Labs", "creation_timestamp": "2026-10-06T17:24:30.846479Z"}, {"uuid": "edf47e96-4d24-47b7-9ce2-e90bd6fca9ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mx7xmr3oib2a", "content": "You Won\u2019t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) - watchTowr Labs", "creation_timestamp": "2026-10-06T17:33:29.337296Z"}, {"uuid": "e2355040-7614-41e9-8f5b-a22820b14484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mx7xqb5tow2n", "content": "Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket.", "creation_timestamp": "2026-10-06T17:35:25.676456Z"}, {"uuid": "c1e31783-4bf9-472a-a21b-f8e60f42c7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx7y3fet2j2u", "content": "Atlassian\u3001Jira\u3068Confluence\u306e\u91cd\u5927\u306a\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u8106\u5f31\u6027\u3067\u8b66\u544a\n\nAtlassian\u306f\u3001Confluence\u3084Jira\u3001Bitbucket\u306a\u3069\u3001\u30bb\u30eb\u30d5\u30db\u30b9\u30c8\u578b\u306eData Center\u88fd\u54c1\u306e\u8907\u6570\u3067\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u306b\u60aa\u7528\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cCVE-2026-21589\u300d\u306b\u3064\u3044\u3066\u3001\u5229\u7528\u8005\u306b\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u3092\u7a81\u304b\u308c\u308b\u3068\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u3001\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30a2", "creation_timestamp": "2026-10-06T17:41:38.969776Z"}, {"uuid": "00237568-bb7a-42ea-a5d4-e1ae60f5e758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/yasna.io/post/3mx7z4yvutf2u", "content": "Atlassian warned of a critical file-access flaw in multiple Data Center products allowing unauthenticated attackers to read known files, rated severity 9.3/10.\n\nCVE-2026-21589 #Flaw #CVE #infosec\n\nFull synthesis & sources: yasna.io", "creation_timestamp": "2026-10-06T18:00:27.272209Z"}, {"uuid": "6ecad19b-1717-43b1-bf68-74629c8133a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mx7z7alhtk2a", "content": "\ud83d\udcf0 Atlassian warns of critical file-access flaw in Jira, Confluence\n\nAtlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file...\n\nhttps://tinyurl.com/2dgmzwt9 #TechNews #CrustyTLDR", "creation_timestamp": "2026-10-06T18:01:41.725299Z"}, {"uuid": "7203bf55-35b6-468f-8c79-a5889be2190f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-21589", "type": "published-proof-of-concept", "source": "Previdian Early Warning email notification", "content": "", "creation_timestamp": "2026-10-06T19:16:07.139817Z"}, {"uuid": "4be6d33b-7689-426c-ac0f-c3ab9b310945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mxa3acb2y42r", "content": "Atlassian warns of critical file access flaw in its datacenter products (CVE-2026-21589) #patchmanagement", "creation_timestamp": "2026-10-06T18:38:05.608303Z"}, {"uuid": "ece8d972-376b-4eab-afaf-344ff77f3725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mxa4ihltutm2", "content": "You Won\u2019t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/", "creation_timestamp": "2026-10-06T19:00:45.635646Z"}, {"uuid": "dad49416-bd3c-4e3b-9942-f288f08d0eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxa4uc66wj2f", "content": "\ud83e\udd16 CVE-2026-21589: critical arbitrary file-access flaw in self-hosted Atlassian Data Center (Confluence, Jira, Bitbucket). Immediate patching advised.\nhttps://www.bleepingcomputer.com/news/security/atlassian-warns-of-critical-file-access-flaw-in-jira-confluence/", "creation_timestamp": "2026-10-06T19:07:10.130220Z"}, {"uuid": "e1e69587-3f44-4f01-a0fa-5b83463db79d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxaa5meana2y", "content": "~Watchtowr~\nPre-auth arbitrary file read affects Jira, Confluence, Bitbucket and more; exposed Crowd credentials can enable admin takeover.\n-\nIOCs: CVE-2026-21589\n-\n#Atlassian #CVE202621589 #ThreatIntel", "creation_timestamp": "2026-10-06T20:06:03.167201Z"}, {"uuid": "3aafb8cb-509b-41b5-b334-74a7b9e6ac78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://bsky.app/profile/timb.me.uk/post/3mxabz2chufs2", "content": "Oopsies:\n\nhttps://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/\n\n#atlassian, #threatintel", "creation_timestamp": "2026-10-06T20:39:22.148057Z"}, {"uuid": "8a465d53-ee56-4fd4-9ca2-5c6651525747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxadzoqa2t2d", "content": "Atlassian disclosed CVE-2026-21589, a critical unauthenticated file-access flaw in self-hosted Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible, and Fisheye. #Atlassian #Jira #Confluence", "creation_timestamp": "2026-10-06T21:15:27.279933Z"}, {"uuid": "ed8c0b7f-af15-424f-8441-cca10742e060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://infosec.exchange/users/securestep9/statuses/117396179743833662", "content": "Using #Atlassian products like #Confluence, #Jira or #Bitbucket on-premise?\nCritical vulnerability CVE-2026-21589 (CVSS 9.3) lets unauthenticated attackers read known web-root files across 8 Atlassian products. Patch affected self-hosted instances now!\ud83d\udc47https://thehackernews.com/2026/10/critical-atlassian-flaw-lets.html", "creation_timestamp": "2026-10-06T21:52:24.144612Z"}, {"uuid": "699009dc-1286-4b56-95f7-0d88f6e2655a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mxag3sbcsm2t", "content": "Using #Atlassian products like #Confluence, #Jira or #Bitbucket on-premise?\n\nCritical vulnerability CVE-2026-21589 (CVSS 9.3) lets unauthenticated attackers read known web-root files across 8 Atlassian products. Patch affected self-hosted instances now!\n\ud83d\udc47", "creation_timestamp": "2026-10-06T21:52:25.376927Z"}, {"uuid": "551083af-be4a-4912-9ecd-509a3052cf00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104470", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-21589-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-06 18:34:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-21589 \u2013 Atlassian Data Center Unauth Arbitrary File Read (CVSS 9.3) | Red/Blue Team suite. 2 tools: Full Exploit (path traversal, WEB-INF read, credential harvest, 8 products, mass scan, SOCKS5/Tor, stealth) & SafeChecker (non-intrusive version audit, IoC guidance, JSON/CSV). Use Ethically, Stay Legal.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-06T19:00:07.000000Z"}, {"uuid": "ff7f0afd-ae9b-4e45-bbe5-6ca4d5ee77eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mxasp7kz562i", "content": "CVE-2026-21589 is trending. Hype score 4, currently #5 on cvemon.\n\nThis is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center,\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-21589", "creation_timestamp": "2026-10-07T01:38:01.166816Z"}, {"uuid": "f82e263c-11cd-442e-86e1-b089284e7931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxaiqvhdvp2k", "content": "Jira\u3001Confluence\u7b49\u3067\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u3092\u53ef\u80fd\u306b\u3059\u308b\u8106\u5f31\u6027\uff08CVE-2026-21589\uff09\u304c\u78ba\u8a8d\u3055\u308c\u307e\u3057\u305f\u3002", "creation_timestamp": "2026-10-06T22:40:00.717068Z"}, {"uuid": "bfe2515d-15b9-429c-92e6-320c091f3ce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://t.me/VulnerabilityNews/44778", "content": "Atlassian warns of critical file-access flaw in Jira, Confluence\n\nAtlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket. [...]\nhttps://www.bleepingcomputer.com/news/security/atlassian-warns-of-critical-file-access-flaw-in-jira-confluence/", "creation_timestamp": "2026-10-06T23:00:34.000000Z"}, {"uuid": "4aeb0ed6-4cf2-48cd-8df9-d4aac25d41f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/densuke.bsky.social/post/3mxaqcg6zkv2w", "content": "\u66f4\u65b0\u3055\u308c\u305f\u3088\u3001\u898b\u306b\u6765\u3066\u306d!\u2192 \n\n\u5171\u6709\u306e\u90e8\u54c1\u306f\u3001\u58ca\u308c\u308b\u3068\u304d\u3082\u4e00\u7dd2\uff1f Atlassian CVE-2026-21589\u30fbLinux ZRAM \u306e\u4f5c\u308a\u76f4\u3057\u30fbLinux Plumbers Conference 2026\u30fbmold 3.0\uff08Rust\uff09\u30fbLinux 35\u5468\u5e74\uff082026/10/7 Linux\u30fbOSS\u30c8\u30ec\u30f3\u30c9\uff09 https://blog.fuga.jp/posts/2026-10-07-linux-oss-trend/", "creation_timestamp": "2026-10-07T00:55:06.657839Z"}, {"uuid": "25bb4fbb-946e-4384-9430-51c6b7bad3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "Telegram/fUNd00idDC0NCj01BnsP2udEQD17B8vfdDBi9shVTP6CUc8", "content": "", "creation_timestamp": "2026-10-06T22:33:31.000000Z"}, {"uuid": "c383c5eb-6035-4c7f-9458-662986eb4744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mxat2bgmgs2y", "content": "\u3010\u7dca\u6025\u3011Atlassian Data Center\u88fd\u54c1\u306b\u8106\u5f31\u6027\uff08CVE-2026-21589 / CVSS v4.0 9.3\uff09\n\nConfluence\u30fbJira\u7b49\u3067\u3001\u8a8d\u8a3c\u306a\u3057\u306bWeb\u30eb\u30fc\u30c8\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307e\u308c\u308b\u6050\u308c\u3002\u60aa\u7528\u306f\u516c\u5f0f\u306b\u8a18\u8f09\u306a\u3057\u3002\n\u5bfe\u51e6: \u4fee\u6b63\u7248\u3078\u66f4\u65b0\u3002\u3067\u304d\u306a\u3051\u308c\u3070WAF\u3067\u300c..\u300d\u3092\u906e\u65ad\u3002\n\nforsmile.jp/articles/atl...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-10-07T01:44:13.161056Z"}, {"uuid": "9b04728f-eb36-461c-89fd-9367c930c1dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "published-proof-of-concept", "source": "Telegram/fUNd00idDC0NCj01BnsP2udEQD17B8vfdDBi9shVTP6CUc8", "content": "", "creation_timestamp": "2026-10-06T22:33:31.000000Z"}, {"uuid": "83700dc1-7683-4812-a340-90d7f5c4af3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxauoe25cr2h", "content": "CVE-2026-21589 is a critical unauthenticated arbitrary file access flaw in multiple Atlassian Data Center products, requiring immediate patching or isolation.\n", "creation_timestamp": "2026-10-07T02:13:20.081578Z"}, {"uuid": "220f7aae-db69-44f2-8144-9644b65e433b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxauor5a2f26", "content": "CVE-2026-21589 is a critical unauthenticated arbitrary file access flaw in multiple Atlassian Data Center products, requiring immediate patching or isolation.\n", "creation_timestamp": "2026-10-07T02:13:33.821539Z"}, {"uuid": "48096d94-69c6-4ed2-aee6-06ce34508cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxauoss7ni24", "content": "CVE-2026-21589 is a critical unauthenticated arbitrary file access flaw in multiple Atlassian Data Center products, requiring immediate patching or isolation.\n", "creation_timestamp": "2026-10-07T02:13:36.091384Z"}, {"uuid": "7be97f6c-e197-4217-a78a-2086d28894b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-21589.yaml", "content": "", "creation_timestamp": "2026-10-06T21:08:13.000000Z"}, {"uuid": "f9929cea-63ae-40b3-bd60-946e4b90fec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxayahxvrg2q", "content": "\ud83e\udd16 CVE-2026-21589 (critical): unauthenticated arbitrary file access in self-hosted Atlassian Data Center (Jira, Confluence, Bitbucket). Patched; no known exploitation.\nhttps://www.bleepingcomputer.com/news/security/atlassian-warns-of-critical-file-access-flaw-in-jira-confluence/", "creation_timestamp": "2026-10-07T03:17:09.496076Z"}, {"uuid": "46f188f6-e5ff-461d-aee1-544babd37d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mxaziinnce2o", "content": "You Won\u2019t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)", "creation_timestamp": "2026-10-07T03:39:32.585935Z"}, {"uuid": "088e38eb-655e-437e-b42e-6c92502ef2f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mxb2oh3su72j", "content": "BREAKING: Atlassian CVE-2026-21589 (CVSS 9.3) \u2014 unauth file read in 8 Data Center products. Patch now; take offline if can't upgrade. (The Hacker News) #CyberSecurity", "creation_timestamp": "2026-10-07T04:00:46.257470Z"}, {"uuid": "f7eede59-cce5-48c1-ac29-8acc3dc76e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mxb656uadsdb", "content": "Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center https://gbhackers.com/atlassian-cve-2026-21589-flaw/", "creation_timestamp": "2026-10-07T05:03:25.132429Z"}, {"uuid": "e040acc5-6388-4d07-b16e-36f2eeb79a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mxbb766th224", "content": "Atlassian: CVE-2026-21589 - Arbitrary File Access Vulnerability impacts\nMultiple Products\nURL: confluence.atlassian.com/security/cve...\nClassification: Critical, Solution: Official Fix, Exploit Maturity: Proof-of-Concept, CVSSv4.0: 9.3", "creation_timestamp": "2026-10-07T05:57:30.404473Z"}, {"uuid": "61c52ccd-ad75-47e9-9426-71e8e09648c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mxbb7tberb22", "content": "\u2022 Atlassian CVE-2026-21589 (critique) : Jira/Confluence/Bitbucket auto-h\u00e9berg\u00e9s\nhttps://www.bleepingcomputer.com/news/security/atlassian-warns-of-critical-file-access-flaw-in-jira-confluence/", "creation_timestamp": "2026-10-07T05:57:51.276321Z"}, {"uuid": "429a39f3-121d-4844-9822-3760e698eeb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/raven-sec.bsky.social/post/3mxbbg3gil2ax", "content": "IBM Langflow & X.Org hit by critical RCE flaws\u2014patch urgently\n\n\u2022 Langflow CVE-2026-97679: CVSS 8.8 RCE\n\u2022 X.Org: 12 vulns, 9 ACE flaws patched\n\u2022 Atlassian CVE-2026-21589 critical flaw\n\n4 sources verified \u00b7 hackingallthethings.com\n#infosec #threatintel #cybersecurity #CriticalVulnerability #Patching", "creation_timestamp": "2026-10-07T06:01:24.776861Z"}, {"uuid": "16872415-5409-4cd6-92a6-0ec6edb350ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://chaos.social/users/christopherkunz/statuses/117398209865608211", "content": "OK, this is an innovative directory traversal vuln:GET /download/resources/jira.webresources:color-picker-popup/images/..::..::..::..::..::WEB-INF::web.xml HTTP/1.1\nThis is from CVE-2026-21589, https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/ \nThe \"::\" gets replaced with \"/\" by some weird sanitation method, read more about it in the writeup.\nTagging @nynbinary for humorous memeing.", "creation_timestamp": "2026-10-07T06:28:45.771244Z"}, {"uuid": "ce945b69-3ec6-49a1-b920-16068b219398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://bsky.app/profile/christopherkunz.bsky.social/post/3mxbdbektrv2j", "content": "This is from CVE-2026-21589, https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/\n\nThe \"::\" gets replaced with \"/\" by some weird sanitation method, read more about it in the writeup. [2/3]", "creation_timestamp": "2026-10-07T06:34:30.507495Z"}, {"uuid": "6368ddf0-2bf3-465d-a3b6-7cb21db067d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxbdf6vnok24", "content": "Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)\n\nAttackers who know where to look can read files from Atlassian Data Center installations without logging in, the company has warned. About CVE-2026-21589 CVE-2026-21589, a critic\u2026\n#hackernews #news", "creation_timestamp": "2026-10-07T06:36:39.031965Z"}, {"uuid": "c5a4a8b2-4a41-417b-a818-ba5c0539a9f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxbeqf32um24", "content": "CVE-2026-21589 enables unauthenticated arbitrary file access in multiple Atlassian Data Center products, requiring exact file paths and fixed by specific version patches.\n", "creation_timestamp": "2026-10-07T07:00:48.765452Z"}, {"uuid": "37c6f8fe-dce3-49b9-9918-e38945f87224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxbesbkbs22m", "content": "CVE-2026-21589 enables unauthenticated arbitrary file access in multiple Atlassian Data Center products, requiring exact file paths and fixed by specific version patches.\n", "creation_timestamp": "2026-10-07T07:01:51.594776Z"}, {"uuid": "e95c91c0-1048-4569-81a8-6d8e43b53d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxbesg626s2t", "content": "CVE-2026-21589 enables unauthenticated arbitrary file access in multiple Atlassian Data Center products, requiring exact file paths and fixed by specific version patches.\n", "creation_timestamp": "2026-10-07T07:01:57.177901Z"}, {"uuid": "24f3a62c-eb8c-44c7-922c-e5d7fa1c0295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxbewidhjl2v", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) (suite)\n\u2022 Twenty (CRM open source) (CVE-2026-105763), CVSS 9.6 (Twenty)\n\u2022 Atlassian Data Center (CVE-2026-21589), CVSS 9.3 (Atlassian)\n\u2022 HPE Integrated Lights-Out (iLO) 7 (CVE-2026-79820), CVSS 9.0 (HPE)", "creation_timestamp": "2026-10-07T07:04:12.831902Z"}, {"uuid": "0cfacb96-3356-40fc-ac40-0cc45738ccd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mxbfghpynv2v", "content": "Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)\n\uff08Atlassian\u3001Data Center\u88fd\u54c1\u306e\u91cd\u5927\u306a\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u8106\u5f31\u6027\u306b\u5373\u6642\u5bfe\u5fdc\u3092\u8981\u8acb\uff09 #HelpNetSecurity (Oct 6)\nwww.helpnetsecurity.com/2026/10/06/a...", "creation_timestamp": "2026-10-07T07:13:12.347617Z"}, {"uuid": "306b23e1-3d46-445d-9e20-eb00514f41f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxbgo54juh2r", "content": "CVE-2026-21589 exploitation is underway against Atlassian servers after researchers published arbitrary file read PoC and technical details.\n\n#Atlassian #Jira #Confluence #Bitbucket #CVE202621589 #PathTraversal #ExploitedInTheWild #Vulnerability", "creation_timestamp": "2026-10-07T07:35:20.484762Z"}, {"uuid": "de308a66-22d6-4029-9210-dc7da8b0e6e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxbgza2ol62f", "content": "Top 3 CVE for last 7 days:\nCVE-2026-104286: 39 interactions\nCVE-2026-88779: 39 interactions\nCVE-2026-88771: 34 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-21589: 29 interactions\nCVE-2026-86360: 8 interactions\nCVE-2023-28252: 7 interactions\n", "creation_timestamp": "2026-10-07T07:41:32.108739Z"}, {"uuid": "5a1fb34d-72a7-4dbe-92c3-33378eb9a483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117398806855479240", "content": "Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products\nAtlassian disclosed CVE-2026-21589 on Oct. 5, a critical flaw (CVSS 9.3) affecting eight self-hosted Data Center products that lets an unauthenticated attacker read specific files in each product\u2019s web application root. The attacker must already know a file\u2019s exact name and path and cannot list directory contents, The Hacker News reports. https://thehackernews.com/2026/10/critical-atlassian-flaw-lets.html", "creation_timestamp": "2026-10-07T09:00:30.466729Z"}, {"uuid": "a79ba280-8a07-493f-b06a-8cd5aa19e23c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxblghruw42q", "content": "Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products\n\nAtlassian disclosed CVE-2026-21589 on Oct. 5, a critical flaw (CVSS 9.3) affecting eight self-hosted Data Center products ... https://threatintel.cc/2026/10/07/critical-atlassian-flaw-lets-unauthenticated.html", "creation_timestamp": "2026-10-07T09:00:31.572822Z"}, {"uuid": "cbbd4cfb-59dd-41d3-9dd2-b5d622d7d5f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxbsm6as7d2v", "content": "Atlassian CVE-2026-21589: pre-auth file read in Jira, Confluence, Bitbucket and five more Data Center products. watchTowr's PoC chains it to Crowd admin. Upgrade now, e.g. Confluence 9.2.26 or 10.2.19. https://cti.securitycyber.uk", "creation_timestamp": "2026-10-07T11:08:59.144146Z"}, {"uuid": "9765dd32-f5cd-4fcf-afc1-8079b1cedeae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117399594744825932", "content": "Atlassian Data Center flaw draws exploitation attempts within two hours of public details\nAttackers began attempting to exploit the critical Atlassian Data Center flaw (CVE-2026-21589) within two hours of public details emerging, The Hacker News reports. The rapid move from disclosure to exploitation attempts shows how fast the patching window is closing. https://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html", "creation_timestamp": "2026-10-07T12:20:52.676961Z"}, {"uuid": "f279e847-6653-4e56-b355-47c78a57961e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxbxcmf4d62j", "content": "Threat actors are exploiting CVE-2026-21589 to gain arbitrary file access in multiple Atlassian Data Center products, prompting patches and mitigations.\n", "creation_timestamp": "2026-10-07T12:33:07.216147Z"}, {"uuid": "0a71d622-89fa-4d4d-82fe-2f62be43c7c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxbxcxrrpm2a", "content": "Threat actors are exploiting CVE-2026-21589 to gain arbitrary file access in multiple Atlassian Data Center products, prompting patches and mitigations.\n", "creation_timestamp": "2026-10-07T12:33:19.782400Z"}, {"uuid": "4ec2bec3-8f80-4dc4-8c28-3a0bee4ff07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxbxdg2yiy2s", "content": "Threat actors are exploiting CVE-2026-21589 to gain arbitrary file access in multiple Atlassian Data Center products, prompting patches and mitigations.\n", "creation_timestamp": "2026-10-07T12:33:34.778950Z"}, {"uuid": "c94f5697-23d4-4cf4-b1f5-6dd5b30cbc50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxbxkg7bsu2e", "content": "~Certeu~\nUnauthenticated attackers can access known files; patch internet-facing systems urgently.\n-\nIOCs: CVE-2026-21589\n-\n#Atlassian #CVE202621589 #ThreatIntel", "creation_timestamp": "2026-10-07T12:37:28.729375Z"}, {"uuid": "4b80a058-208a-4989-add1-4ba32ded69d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-unauthenticated-path-traversal-atlassian-bitbucket-jira-confluence", "content": "", "creation_timestamp": "2026-10-07T00:15:09.000000Z"}, {"uuid": "d607fe0f-8e8a-4a87-bb5d-4f669aff3b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mxbyabl4mp2m", "content": "A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication.", "creation_timestamp": "2026-10-07T12:49:43.526722Z"}, {"uuid": "6a8681a6-e9d8-4241-bb6e-ccd8f9f2ea30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117399809807735378", "content": "You Won\u2019t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)#CVE_2026_21589 #Bitbucket #Confluence #Jira #AtlassianBamboo #AtlassianCrowd https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/", "creation_timestamp": "2026-10-07T13:15:35.733369Z"}, {"uuid": "744c8df9-87df-4228-9844-8d076416c24c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxc2kjjsql2j", "content": "\ud83e\udd16 CVE-2026-21589 (CVSS 9.3): unauthenticated arbitrary file access in Atlassian Data Center (Bitbucket, Confluence, Jira). Exploitation attempts began within 2h of public PoC details.\nhttps://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html", "creation_timestamp": "2026-10-07T13:31:15.325192Z"}, {"uuid": "2eec5a30-e21b-4444-bd13-1c9a28b5ff18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/rasnedev.bsky.social/post/3mxc2nwnqvp2n", "content": "Hackers exploit critical Atlassian flaw after public PoC release\n\nHackers exploit CVE-2026-21589 in Jira, Confluence, Bitbucket allowing unauthenticated file access and admin takeover. Patch now.\n\nhttps://rasne.dev/news/hackers-exploit-critical-atlassian-flaw-after-public-poc-release", "creation_timestamp": "2026-10-07T13:33:09.157860Z"}, {"uuid": "54234d02-78e7-4c39-b570-b319cb381ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mxc2x2tgys2c", "content": "Atlassian\u2019s CVE-2026-21589 PoC could let attackers take over Jira via Crowd file access. Patch now. #SecurityNews #Atlassian #CVE2026-21589 #Jira #CyberSecurity #Vulnerability https://thedailytechfeed.com/atlassian-poc-exploit-reveals-critical-jira-admin-risk/", "creation_timestamp": "2026-10-07T13:38:16.217601Z"}, {"uuid": "264fd87e-01c0-45f7-892b-63886a11756b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117399902465945716", "content": "An unauthenticated attacker can exploit CVE-2026-21589 to access specific files in the application's web root directory if they know the file's exact name and path. https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/", "creation_timestamp": "2026-10-07T13:39:08.126073Z"}, {"uuid": "d11faf84-9a7f-4768-9990-ccf4fc34a1d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mxc2yypp4k2g", "content": "An unauthenticated attacker can exploit CVE-2026-21589 to access specific files in the application's web root directory if they know the file's exact name and path. www.bleepingcomputer.com/news/securit...", "creation_timestamp": "2026-10-07T13:39:15.979406Z"}, {"uuid": "c6402163-298e-4721-92ec-fb5153ca042a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxc42gzfbv2r", "content": "\ud83d\udcf0 Atlassian Peringatkan Celah Kritis CVE-2026-21589 di Jira, Confluence, dan Bitbucket\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/07/atlassian-cve-2026-21589-jira-confluence-bitbucket/\n\n#atlassian #cybersecurity #keamananSiber #server #vulnerability", "creation_timestamp": "2026-10-07T13:58:01.922050Z"}, {"uuid": "1284416a-cbeb-40f4-81ea-e0be10c570b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://t.me/thehackernews/10262", "content": "\u203c\ufe0f Two hours.\n\nThat\u2019s how quickly exploitation attempts followed public details for Atlassian CVE-2026-21589.\n\nThe flaw lets unauthenticated attackers access specific webroot files when exact paths are known. Fixes are available.\n\nRead - https://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html", "creation_timestamp": "2026-10-07T12:15:54.000000Z"}, {"uuid": "5a566130-cae9-4f56-bc67-4bc29b5b9ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "Telegram/_LuVC10xiqdPU9uIK0VcyBRo6Ea4Fw9LvXQf5h7FKNJ3DmI", "content": "", "creation_timestamp": "2026-10-07T12:43:57.000000Z"}, {"uuid": "5021ba70-2a29-4c79-8b4d-cdb18ce1bfdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/threathuntergirl.bsky.social/post/3mxc4xotxfc2y", "content": "CVE-2026-21589", "creation_timestamp": "2026-10-07T14:14:24.459106Z"}, {"uuid": "33dd2244-43de-4af9-aeed-a3365e01db02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mxc545vuqq2c", "content": "Hackers are exploiting CVE-2026-21589, a critical unauthenticated flaw in Atlassian Jira, Confluence, and Bitbucket, after a public proof-of-concept appeared.", "creation_timestamp": "2026-10-07T14:16:52.626662Z"}, {"uuid": "04343a7a-ad04-4bb1-ab33-d8a010b15230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxc6gpf7tc24", "content": "Atlassian warns of critical file-access flaw in Jira, Confluence\n\nAtlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bi\u2026\n#hackernews #news", "creation_timestamp": "2026-10-07T14:40:41.013580Z"}, {"uuid": "395c070a-f524-410e-9d81-71ccdcf26baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mxc7j3eu3q2n", "content": "Atlassian datacenter products get critical file flaw\n\nAtlassian warned users about CVE-2026-21589, a critical arbitrary file access flaw in its datacenter products, requiring immediate patching or offline removal.", "creation_timestamp": "2026-10-07T14:59:54.457439Z"}, {"uuid": "224c2c14-7e40-4e99-b1b4-35c081d9b17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "published-proof-of-concept", "source": "Telegram/_LuVC10xiqdPU9uIK0VcyBRo6Ea4Fw9LvXQf5h7FKNJ3DmI", "content": "", "creation_timestamp": "2026-10-07T12:43:57.000000Z"}, {"uuid": "0c1a8bf5-3add-41cc-88d5-9a03405d7005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "exploited", "source": "https://t.me/thehackernews/10262", "content": "\u203c\ufe0f Two hours.\n\nThat\u2019s how quickly exploitation attempts followed public details for Atlassian CVE-2026-21589.\n\nThe flaw lets unauthenticated attackers access specific webroot files when exact paths are known. Fixes are available.\n\nRead - https://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html", "creation_timestamp": "2026-10-07T12:15:54.000000Z"}, {"uuid": "582a7d2c-5bc6-41c6-9b37-013bbba48fad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://t.me/bdufstecru/3508", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Atlassian Data Center \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u0430\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\nBDU:2026-16016\nCVE-2026-21589\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://jira.atlassian.com/browse/BAM-26567\nhttps://jira.atlassian.com/browse/BSERV-20604\nhttps://jira.atlassian.com/browse/CONFSERVER-104488\nhttps://jira.atlassian.com/browse/CRUC-8741\nhttps://jira.atlassian.com/browse/CWD-6610\nhttps://jira.atlassian.com/browse/FE-7583\nhttps://jira.atlassian.com/browse/JRASERVER-79546\nhttps://jira.atlassian.com/browse/JSDSERVER-16809", "creation_timestamp": "2026-10-07T14:09:37.000000Z"}, {"uuid": "cd9f3fab-ce86-4d73-a020-8c1d259106d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/bufigol.bsky.social/post/3mxc7kov2l725", "content": "CVE-2026-21589: CVSS 9.3, unauthenticated file reads in 8 Data Center products. \"Must know the exact path\" is thin comfort: anyone can install a trial and map it. Patch, then check your logs. #infosec #Atlassian www.helpnetsecurity.com/2026/10/06/a...", "creation_timestamp": "2026-10-07T15:00:52.968526Z"}, {"uuid": "6a93c85e-4b81-4250-8ec0-10ac5f127224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3mxc7mv7sji22", "content": "Scans for Atlassian vulnerablity (CVE-2026-21589) https://isc.sans.edu/diary/33406", "creation_timestamp": "2026-10-07T15:02:01.593799Z"}, {"uuid": "d5418fd7-cb80-456f-a8f7-5f5d3664b06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxccxp3fzf2o", "content": "~Cybergcca~\nSeven advisories issued; Atlassian CVE-2026-21589 is actively exploited.\n-\nIOCs: CVE-2026-21589, CVE-2026-59346, CVE-2026-59347\n-\n#CVE #CyberSecurity #ThreatIntel", "creation_timestamp": "2026-10-07T16:01:45.484096Z"}, {"uuid": "18866f89-7a3c-450c-87da-ba98c8a10d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mxcerhha722q", "content": "Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)\n\nisc.sans.edu/diary/rss/33...\n\n#Cybersecurity #LargeScaleImpact #Vulnerability", "creation_timestamp": "2026-10-07T16:34:05.298706Z"}, {"uuid": "a5282255-f55b-4138-8c73-bf36530f8811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mxcf25sqac2p", "content": "Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)\n\nwww.helpnetsecurity.com/2026/10/07/e...\n\n#Kyberturvallisuus #LaajaVaikutus #Haavoittuvuus", "creation_timestamp": "2026-10-07T16:38:57.611932Z"}, {"uuid": "8d88e6d2-da17-4c4c-ab0b-576d8b8413d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117400656310310034", "content": "Scans for Atlassian vulnerablity (CVE-2026-21589)#CVE_2026_21589 https://isc.sans.edu/diary/rss/33406", "creation_timestamp": "2026-10-07T16:50:53.719266Z"}, {"uuid": "649bc53e-a88e-46bc-aa2c-e4f1e8b9a0ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://t.me/ctinow/258040", "content": "Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)\nhttps://ift.tt/yNoWlvV", "creation_timestamp": "2026-10-07T15:09:17.000000Z"}, {"uuid": "f4738553-0533-456a-8a0f-c3f967efc64d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcihip23j2w", "content": "CVE-2026-21589 - bamboo data center\nAn unauthenticated user can request certain files inside the web\u2011application folder of the listed Atlassian products if they already know the exact file name and path. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#atlassian #CVE #infosec", "creation_timestamp": "2026-10-07T17:40:04.537431Z"}, {"uuid": "8df57cd9-808a-4f76-8510-f7f2b9ea2626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-21589", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mxcjm5pjhh2o", "content": "Overview On October 5, 2026, Atlassian published a security advisory for CVE-2026-21589 , a critical arbitrary file access vulnerability affecting eight products: Bitb...\n\n\ud83d\udd17 https://www.rapid7.com/blog/post/etr-cve-2026-21589-critical-unauthenticated-arbitrary-file-access-in-atlassian-products", "creation_timestamp": "2026-10-07T18:00:34.170137Z"}, {"uuid": "c18f1a31-cf50-43ca-ad56-57e830c4efa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxhfeh22q", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "creation_timestamp": "2026-10-07T19:00:47.919503Z"}, {"uuid": "ac53c452-b942-459c-80f9-b5e3dec11225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs2x4c2q", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "creation_timestamp": "2026-10-07T19:00:48.370091Z"}, {"uuid": "621998af-2775-466c-9920-c1d36feaac3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs2y3k2q", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "creation_timestamp": "2026-10-07T19:00:48.821055Z"}, {"uuid": "9ead932a-4ea6-4491-b828-2837ff14ba11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs2z2s2q", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "creation_timestamp": "2026-10-07T19:00:49.279686Z"}, {"uuid": "1e3aeb88-6ba7-4941-8b71-ffc075747ef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs33yk2q", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "creation_timestamp": "2026-10-07T19:00:49.750945Z"}, {"uuid": "d6758499-1c0c-4815-838c-eb5319d09f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs34xs2q", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "creation_timestamp": "2026-10-07T19:00:50.378659Z"}, {"uuid": "f00673a0-88dc-4389-84ba-407f0b96a5c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs34xt2q", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "creation_timestamp": "2026-10-07T19:00:50.805863Z"}, {"uuid": "0712e895-e802-4aaa-9b79-fbaa8076821f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs34xu2q", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "creation_timestamp": "2026-10-07T19:00:51.235887Z"}, {"uuid": "e14e6b2c-f08e-4ca6-b14c-2e77a4c33aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxcni5l7572q", "content": "Atlassian\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-21589\uff09\u3001\u65e9\u304f\u3082\u60aa\u7528\u306e\u8a66\u307f\u3092\u78ba\u8a8d\n\nAtlassian\u306f\u3001\u81ea\u793e\u7ba1\u7406\u578b\u306eDataAlly\u88fd\u54c1\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u306e\u8106\u5f31\u6027\uff08CVE-2026-21589\uff09\u3092\u4fee\u6b63\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002\u305d\u306e1\u65e5\u5f8c\u3001watchTowr\u306e\u7814\u7a76\u8005\u304c\u8106\u5f31\u6027\u306e\u6280\u8853\u7684\u306a\u89e3\u8aac\u3092\u516c\u958b\u3057\u3066\u304b\u3089\u6570\u6642\u9593\u5f8c\u306b\u306f\u3001\u653b\u6483\u8005\u304c\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3088\u3046\u3068\u3059\u308b\u52d5\u304d\u304c\u78ba\u8a8d\u3055\u308c\u3066", "creation_timestamp": "2026-10-07T19:09:54.814139Z"}, {"uuid": "24e86ecd-c12b-4f59-b201-fcbfbb5c156c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxcqf6s6ib2e", "content": "~Akamai~\nUnauthenticated path traversal lets attackers read files and credentials; patch self-hosted products immediately.\n-\nIOCs: CVE-2026-21589, 3000990 v1\n-\n#Atlassian #CVE202621589 #ThreatIntel", "creation_timestamp": "2026-10-07T20:01:56.738184Z"}, {"uuid": "1376cdcc-deef-4af5-bddf-35e54218301e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mxcqmxewlz2m", "content": "\ud83d\udea8 Rapid Response: CVE-2026-21589 is a critical arbitrary file access vulnerability affecting eight Atlassian Data Center products.\n\nCensys detects 95,366 Internet facing hosts and 431,502 web properties running affected products. \n\nDetails: https://bit.ly/4dWwYgs ", "creation_timestamp": "2026-10-07T20:06:18.203732Z"}, {"uuid": "8596ad45-0049-48ef-a4d1-15ad0982df34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://t.me/true_secator/8689", "content": "\u041f\u043e \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n1. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2026-21589, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Atlassian, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Jira, Confluence \u0438 Bitbucket, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Previdian \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u044d\u0442\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0435\u0442\u0438-\u043b\u043e\u0432\u0443\u0448\u043a\u0435, \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0442\u0447\u0435\u0442\u0430. \u041f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441 \u0442\u0440\u0435\u0445 IP: 38.60.157[.]86, 146.70.187[.]234 \u0438 159.26.119[.]225.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-21589 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0435\u0441\u043b\u0438 \u0435\u043c\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0442\u043e\u0447\u043d\u043e\u0435 \u0438\u043c\u044f \u0438 \u043f\u0443\u0442\u044c \u043a \u0444\u0430\u0439\u043b\u0443.\n\n\u0412 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a Atlassian \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0421\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0435\u0442 \u0441 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a CVE-2026-21589 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043a Jira, Confluence \u0438 Bitbucket \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441 Crowd.\n\n\u0411\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f - \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Atlassian, \u0430 watchTowr \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0437\u044f\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430 \u0434\u043b\u044f CVE-2026-21589.\n\n2. SonicWall \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f SSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0440\u0438\u0441\u043a\u0430 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 SMA1000.\n\nCVE-2026-102255 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Appliance WorkPlace \u043c\u043e\u0434\u0435\u043b\u0435\u0439 SMA1000 6210, 7210 \u0438 8200v, \u043d\u043e \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 SMA 100 Series \u0438\u043b\u0438 SSL-VPN, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 SonicWall.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u043f\u0443\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n3. Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Android, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 25 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Framework \u0438 System, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u043c\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 System, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0430\u0432 \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0412 Framework \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0430 \u043f\u044f\u0442\u044c - \u043a EoP. \u0412 System \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a EoP, \u043f\u044f\u0442\u044c DoS, \u043e\u0434\u043d\u0430 RCE \u0438 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n4. \u041a\u0430\u043a \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u0430\u044f \u0442\u0430\u0431\u043b\u0438\u0446\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0432 LibreOffice \u0438 Apache OpenOffice.\n\n\u0410\u0442\u0430\u043a\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435 Java \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435.\n\n\u041f\u043e\u043a\u0430 \u0447\u0442\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043b\u0438\u0448\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 PoC, \u0438 \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0412 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043e\u0442 5 \u043e\u043a\u0442\u044f\u0431\u0440\u044f LibreOffice \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 CVE-2026-63277, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044e 26.2.5 \u0438\u043b\u0438 26.8.0. \u0411\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b. \n\n\u0412 Apache OpenOffice \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-59265. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e \u0442\u0435\u043a\u0443\u0449\u0435\u0439, 4.1.16, \u0438, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 4.1.17, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n5. \u0415\u0449\u0435 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Chrome 155 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c 247 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0447\u0435\u0442\u044b\u0440\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u041e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Chromecast, Browser, Navigation \u0438 Track \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-106382, CVE-2026-106197, CVE-2026-106358 \u0438 CVE-2026-106347.\n\n6. Microsoft \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Exchange Server \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e CVE-2026-96940 (CVSS 8,8).\n\n\u041e\u043d\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0441\u043b\u0430\u0431\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u043d\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c Exchange. IT-\u0433\u0438\u0433\u0430\u043d\u0442 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u00ab\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0431\u043e\u043b\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0439\u00bb.", "creation_timestamp": "2026-10-07T17:05:07.000000Z"}, {"uuid": "7150a13a-9825-489c-bd9e-157baecc187a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ca794994-53b1-4f27-8263-ee62a3eb8e2c", "content": "", "creation_timestamp": "2026-10-07T22:00:27.156945Z"}, {"uuid": "89e6e23c-9be0-4d8e-9c05-630af9637dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mxcwz4dncn2w", "content": "\ud83d\udce2 CVE-2026-21589 : Lecture de fichiers arbitraire pr\u00e9-auth sur Atlassian Jira, Confluence et plus\n\nCet article pr\u00e9sente une analyse technique approfondie de CVE-2026-21589, une vuln\u00e9rabilit\u00e9 critique divulgu\u00e9e par Atlassian dans\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#Atlassian #Confluence #Cyberveille", "creation_timestamp": "2026-10-07T22:00:27.674069Z"}, {"uuid": "57ed7bfc-c3e6-4687-bcee-ba2c8e142fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxd2xclpvs22", "content": "Atlassian\u3001Jira\u3084Confluence\u306a\u3069\u306bCVSS 9.3\u306e\u8106\u5f31\u6027\u300cCVE-2026-21589\u300d\u2015\u8a8d\u8a3c\u306a\u3057\u3067\u7279\u5b9a\u30d5\u30a1\u30a4\u30eb\u3078\u30a2\u30af\u30bb\u30b9\u53ef\u80fd \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "creation_timestamp": "2026-10-07T23:11:03.946192Z"}, {"uuid": "7900c287-7d20-4f9a-b73d-b36c860970e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mxd2z3sn7h2z", "content": "You Won\u2019t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) labs.watchtowr.com/you-wont-hea...", "creation_timestamp": "2026-10-07T23:12:06.039379Z"}, {"uuid": "b69d7c5f-9a10-49e4-b818-cd5e2b23e683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44801", "content": "Hackers exploit critical Atlassian flaw after public PoC release\n\nA critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. [...]\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/", "creation_timestamp": "2026-10-07T23:00:38.000000Z"}, {"uuid": "41b60d96-8b79-4f91-89d2-7e648fa60ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdbnwiwuh2q", "content": "Atlassian\u30018\u88fd\u54c1\u306b\u5f71\u97ff\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nAtlassian\u306f\u3001\u540c\u793e\u306e8\u88fd\u54c1\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u5f71\u97ff\u3059\u308b\u3001\u6df1\u523b\u5ea6\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-21589\u300d\uff08CVSS\u30b9\u30b3\u30a29.3\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u304a\u308a\u3001\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u554f\u984c\u3068\u8aac\u660e\u3055\u308c\u3066\u3044\u307e\u3059\u3002 \u8a8d\u8a3c\u306a\u3057\u3067\u60aa\u7528\u3067\u304d\u3001Web\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30eb\u30fc\u30c8", "creation_timestamp": "2026-10-08T01:11:03.791800Z"}, {"uuid": "6ca2238a-7fb0-42b6-a861-1200d9bb745d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdcps2rew2f", "content": "Jira\u7ba1\u7406\u8005\u6a29\u9650\u306e\u596a\u53d6\u306b\u3064\u306a\u304c\u308b Atlassian \u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001PoC\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u304c\u516c\u958b\n\n\u30bb\u30eb\u30d5\u30db\u30b9\u30c8\u578b\u306e Atlassian \u88fd\u54c18\u7a2e\u306b\u5f71\u97ff\u3059\u308b\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cCVE-2026-21589\u300d\u306b\u3064\u3044\u3066\u3001PoC\uff08\u6982\u5ff5\u5b9f\u8a3c\uff09\u306e\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u30c1\u30a7\u30fc\u30f3\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002 \u7814\u7a76\u7d50\u679c\u306b\u3088\u308b\u3068\u3001Atlassian Crowd \u3068\u9023\u643a\u3057\u305f\u74b0\u5883\u3067\u306f\u3001\u653b\u6483\u8005\u304c\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u5e73\u6587\u3067\u76d7\u307f\u51fa\u3057\u3001\u305d", "creation_timestamp": "2026-10-08T01:29:59.984599Z"}, {"uuid": "d847ebaf-a482-4bd5-a53f-e5d0f26b823a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdcr2ubxy2n", "content": "\u516c\u958bPoC\u306e\u767b\u5834\u3092\u53d7\u3051\u3001Atlassian\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u72d9\u3046\u653b\u6483\u304c\u767a\u751f\n\nJira\u3001Confluence\u3001Bitbucket\u306a\u3069\u3001Atlassian\u306e\u8907\u6570\u306e\u88fd\u54c1\u30d5\u30a1\u30df\u30ea\u30fc\u306b\u5f71\u97ff\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cCVE-2026-21589\u300d\u3092\u60aa\u7528\u3057\u305f\u653b\u6483\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u653b\u6483\u306b\u8a8d\u8a3c\u306f\u5fc5\u8981\u3042\u308a\u307e\u305b\u3093\u3002 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696d\u306ePrevidian\u306f\u672c\u65e5\u3001\u81ea\u793e\u306e\u30cf\u30cb\u30fc\u30dd\u30c3\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3067\u3053\u306e\u653b\u6483\u6d3b\u52d5\u3092\u691c\u77e5\u3057\u307e\u3057", "creation_timestamp": "2026-10-08T01:30:42.543151Z"}, {"uuid": "ba39ebd9-34b4-497c-a665-34c66d971d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mxdj7ubtws2q", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-21589) Atlassian Data Center Arbitrary File Access via Path Traversal\" and \"Emerging Threat: (CVE-2026-94483) Next.js Server-Side Request Forgery via Image Optimization\".\n \n#cybersecurity #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-10-08T03:26:21.768248Z"}]}