CVE-2026-21589Vulnerability

1. “One example is CVE-2026-21589, a critical flaw in Atlassian’s self-hosted Data Center products that attackers began targeting within hours of a PoC being published.”

   SecurityWeekNews23 Oct 2026
   Atlassian Patches 75 Flaws in Data Center and Server Products

2. “Cybersecurity and Infrastructure Security Agency (CISA) added an Atlassian flaw, tracked as CVE-2026-21589 (CVSS score of 9.3), to its Known Exploited Vulnerabilities (KEV) catalog.”

   Security AffairsNews16 Oct 2026
   U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog

3. “CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability”

   CISA advisoriesGovernment15 Oct 2026
   CISA Adds One Known Exploited Vulnerability to Catalog

4. “The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible, and Fis…”

   The Hacker NewsNews12 Oct 2026
   ⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

5. “Atlassian released patches for CVE-2026-21589, a critical arbitrary file access vulnerability rated CVSS 9.3.”

   Check Point ResearchVendor12 Oct 2026
   12th October – Threat Intelligence Report

6. “[Atlassian CVE-2026-21589]”

   Risky Business NewsNews12 Oct 2026
   Risky Bulletin: ShinyHunters suspects arrested in US and Jordan

7. “CVE-2026-21589”

   CERT-FRGovernment12 Oct 2026
   Bulletin d'actualité CERTFR-2026-ACT-043 (12 octobre 2026)

8. “You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)”

   Security AffairsNews11 Oct 2026
   Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION

9. “Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)”

   Help Net SecurityNews11 Oct 2026
   Week in review: FortiBleed is still active, Patch Tuesday forecast

10. “Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products.”

    SecurityWeekNews8 Oct 2026
    Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication

11. “The flaw, tracked as CVE-2026-21589, was described by Atlassian in an October 5 advisory as an arbitrary file access, with a severity score (CVSS) of 9.3.”

    Infosecurity MagazineNews8 Oct 2026
    Critical Flaw in Multiple Atlassian Products Exploited in the Wild

12. “Threat actors are exploiting CVE-2026-21589, a critical Atlassian flaw that can expose sensitive files across multiple Data Center products.”

    Security AffairsNews8 Oct 2026
    Atlassian Vulnerability Comes Under Attack Hours After Details Go Public

13. “Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)”

    SANS Internet Storm CenterVendor7 Oct 2026
    Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)

14. “Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)”

    Help Net SecurityNews7 Oct 2026
    Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)

15. “CVE-2026-21589: Critical Atlassian File Access”

    SOCRadarVendor7 Oct 2026
    CVE-2026-21589: Critical Atlassian File Access

16. “CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products”

    Rapid7Vendor7 Oct 2026
    CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products

17. “The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible, and Fis…”

    The Hacker NewsNews7 Oct 2026
    Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

18. “The security defect, tracked as CVE-2026-21589 (CVSS score of 9.3), is described as an arbitrary file access issue.”

    SecurityWeekNews7 Oct 2026
    Atlassian Patches Critical Vulnerability Affecting 8 Products

19. “CVE-2026-21589 | Atlassian Data Center Products Unauthenticated Arbitrary File Read Vulnerability”

    Horizon3.aiVendor6 Oct 2026
    CVE-2026-21589 | Atlassian Data Center Products Unauthenticated Arbitrary File Read Vulnerability

20. “You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)”

    watchTowr LabsVendor6 Oct 2026
    You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)

• crowd[.]propertiesin 7 reports
• fbijobs[.]govin 1 report
• hunt[.]ioin 1 report

Also named with it: CVE-2026-88779, CVE-2026-96940, CVE-2026-102255, CVE-2025-64393, CVE-2026-86360, CVE-2026-76455, CVE-2026-47483, CVE-2026-104711, CVE-2026-58062, CVE-2026-102489, CVE-2026-102490, CVE-2026-104286, CVE-2026-65182, CVE-2026-65905, CVE-2026-68525, CVE-2026-65637, CVE-2026-75595