Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
4 / 4 results
criticalbug_reportVulnerabilityAtlassian CVE-2026-21589 exploited in wild after PoC release
Self-hosted Atlassian Data Center products: Jira Software, Jira Service Management, Confluence, Bitbucket, Bamboo, Crowd, Crucible, and Fisheye. Unauthenticated arbitrary file read vulnerability.
criticalbug_reportVulnerabilityAtlassian Data Center CVE-2026-21589 exploited within 2 hours of disclosure
Atlassian Data Center products: Bitbucket (versions before 9.4.26, 10.2.8, 10.5.1), Confluence (before 9.2.26, 10.2.19), Jira Service Management and Software (before 5.12.40/9.12.40, 10.3.26, 11.3.12), Bamboo (before 10.2.24, 12.1.12), Crowd (before…
criticalbug_reportVulnerabilityCritical file-access flaw in Atlassian Data Center products (self-hosted)
Atlassian self-hosted Data Center products: Confluence (< 9.2.26, 10.2.19), Jira Software/Service Management (< 9.12.40, 10.3.26, 11.3.12), Bitbucket (< 9.4.26, 10.2.8, 10.5.1), Bamboo (< 10.2.24, 12.1.12), Crowd (< 6.3.7, 7.0.3, 7.1.7, 7.2.4), Cruci…
criticalbug_reportVulnerabilityAtlassian path traversal flaw (CVE-2026-21589) exposes files in 8 products
8 Atlassian Data Center products: Bitbucket, Confluence, Jira Software, Jira Service Management, Bamboo, Crowd, Crucible, and Fisheye. All versions prior to fixed releases (e.g., Confluence <9.2.26/10.2.19, Jira Software <9.12.40/10.3.26/11.3.12).