Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports

Filtered Reports

8 / 8 results
Active filter:tag: #atlassian✕ clear
Atlassian CVE-2026-21589 exploited in wild after PoC releasecriticalbug_reportVulnerability
bug_reportVulnerability

Atlassian CVE-2026-21589 exploited in wild after PoC release

Self-hosted Atlassian Data Center products: Jira Software, Jira Service Management, Confluence, Bitbucket, Bamboo, Crowd, Crucible, and Fisheye. Unauthenticated arbitrary file read vulnerability.

CVE-2026-215897 Oct · 10:49 UTC
Atlassian Data Center CVE-2026-21589 exploited within 2 hours of disclosurecriticalbug_reportVulnerability
bug_reportVulnerability

Atlassian Data Center CVE-2026-21589 exploited within 2 hours of disclosure

Atlassian Data Center products: Bitbucket (versions before 9.4.26, 10.2.8, 10.5.1), Confluence (before 9.2.26, 10.2.19), Jira Service Management and Software (before 5.12.40/9.12.40, 10.3.26, 11.3.12), Bamboo (before 10.2.24, 12.1.12), Crowd (before…

CVE-2026-215897 Oct · 09:49 UTC
Critical file access flaw in Atlassian Data Center products requires patchingcriticalbug_reportVulnerability
bug_reportVulnerability

Critical file access flaw in Atlassian Data Center products requires patching

CVE-2026-21589 affects all versions of Atlassian Data Center products prior to fixed releases: Bitbucket (fix: 9.4.26, 10.2.8, 10.5.1), Confluence (9.2.26, 10.2.19), Jira Service Management and Software (5.12.40/9.12.40, 10.3.26, 11.3.12), Bamboo (10…

Atlassian7 Oct · 07:52 UTC
Critical unauthenticated path traversal in Atlassian productscriticalbug_reportVulnerability
bug_reportVulnerability

Critical unauthenticated path traversal in Atlassian products

Multiple Atlassian products: Bitbucket, Jira, Confluence, Bamboo, Crowd Data Centre, Crucible, and Fisheye. Specific vulnerable versions not provided in advisory. CVE identifier not yet assigned.

Atlassian7 Oct · 05:15 UTC
Critical file-access flaw in Atlassian Data Center products (self-hosted)criticalbug_reportVulnerability
bug_reportVulnerability

Critical file-access flaw in Atlassian Data Center products (self-hosted)

Atlassian self-hosted Data Center products: Confluence (< 9.2.26, 10.2.19), Jira Software/Service Management (< 9.12.40, 10.3.26, 11.3.12), Bitbucket (< 9.4.26, 10.2.8, 10.5.1), Bamboo (< 10.2.24, 12.1.12), Crowd (< 6.3.7, 7.0.3, 7.1.7, 7.2.4), Cruci…

CVE-2026-215896 Oct · 15:34 UTC
Atlassian path traversal flaw (CVE-2026-21589) exposes files in 8 productscriticalbug_reportVulnerability
bug_reportVulnerability

Atlassian path traversal flaw (CVE-2026-21589) exposes files in 8 products

8 Atlassian Data Center products: Bitbucket, Confluence, Jira Software, Jira Service Management, Bamboo, Crowd, Crucible, and Fisheye. All versions prior to fixed releases (e.g., Confluence <9.2.26/10.2.19, Jira Software <9.12.40/10.3.26/11.3.12).

CVE-2026-215896 Oct · 04:58 UTC
Atlassian Rovo prompt injection enables data exfiltration from Jira/Confluencehighbug_reportVulnerability
bug_reportVulnerability

Atlassian Rovo prompt injection enables data exfiltration from Jira/Confluence

Atlassian Rovo assistant on Standard, Premium, and Enterprise plans. Affects organizations with Rovo enabled (default setting). Exploitable by authenticated users who interact with attacker-controlled content (documents) or links (rovoChatPrompt para…

Atlassian8 Aug · 06:54 UTC
F5 BIG-IP Exploitation Leads to Confluence Compromise and Lateral Movementhighperson_alertThreat Actor
person_alertThreat Actor

F5 BIG-IP Exploitation Leads to Confluence Compromise and Lateral Movement

The threat actor behind this campaign remains unattributed. Motivation appears to be credential theft and network persistence within enterprise environments.

F522 May · 14:53 UTC