Critical RCE Vulnerability in Bamboo Data Center Exposed

Cybersecuritynews

Critical RCE Vulnerability in Bamboo Data Center Exposed

First seen 20 Mar 2026, 10:27 UTC • •74.0

Article Content

1 / 5

Browse articles

ThreatCluster •March 23, 2026 at 12:35 UTC

•CVE-2026-21570 is a high-severity RCE vulnerability in Bamboo Data Center.
•Affected versions include 9.6.0 to 12.1.0, with a CVSS score of 8.6.
•Users are advised to upgrade to specified fixed versions to prevent exploitation.

A high-severity Remote Code Execution (RCE) vulnerability, tracked as CVE-2026-21570, has been identified in Bamboo Data Center versions 9.6.0 through 12.1.0. This vulnerability, with a CVSS score of 8.6, allows authenticated attackers to execute arbitrary malicious code on affected systems. Atlassian has advised users to upgrade to fixed versions: 9.6.24 or higher, 10.2.16 or higher, and 12.1.3 or higher. The vulnerability was reported via Atlassian's internal program and poses a significant risk to enterprises using this platform for software build and release management. Security teams are urged to apply the necessary updates immediately to mitigate potential exploitation. The vulnerability was published on 2026-03-17.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 203d ago How this analysis works

Timeline

2026-03-17

CVE-2026-21570 published

2026-03-18

Tenable article published detailing the vulnerability

2026-03-20

Cybersecuritynews article published urging users to apply patches

More articles in this cluster (4)

Threat Graph

6 entities, 9 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Remote Code Execution
T1203 - Exploitation for Client Execution

Vulnerability (1)

CVE-2026-21570

Affected Platform (3)

Bamboo Data Center
Bamboo Data Centre
Bamboo Server

Relationships

CVE-2026-21570 targets Bamboo Data Center
CVE-2026-21570 targets Bamboo Data Centre
CVE-2026-21570 targets Bamboo Server
Remote Code Execution targets Bamboo Data Center
Remote Code Execution targets Bamboo Data Centre
Remote Code Execution targets Bamboo Server
T1203 - Exploitation for Client Execution targets Bamboo Data Center
T1203 - Exploitation for Client Execution targets Bamboo Data Centre
T1203 - Exploitation for Client Execution targets Bamboo Server

Following this threat?

Track CVE-2026-21570 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…