Frequency
5
occurrences
First Seen
February 5, 2026
Last Seen
October 8, 2026
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—
Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
On October 5, 2026, Atlassian disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting multiple products including Bitbucket Data Center, Confluence Data Center, and Jira Software Data Center. All versions of these products are impacted, allowing unauthenticated attackers t...
Atlassian has released security patches addressing multiple vulnerabilities across its products, including Confluence, Jira, and Bamboo. Notably, CVE-2026-45674 poses a critical risk, allowing attackers to intercept connections via man-in-the-middle attacks. Other vulnerabilities, such as CVE-2026-5...
Public Exploits
Checking GitHub for proof-of-concept code…
Related Clusters (2)
Related Articles (5)
Related Entities
RansomwareOperation Pulsar RATAtlassianCVE-2026-21589CWE-611 - Improper Restriction Of XML External Entity Reference (xxe)CWE-120 - Classic Buffer OverflowCWE-287 - Improper AuthenticationPulsar RATT1055 - Process InjectionT1056 - Input CaptureT1059.001 - PowerShellT1071 - Application Layer Protocol