hxxp://java.sun[.]com/xml/ns/javaee/web-app_3_0.xsdURL
Reported by 1 independent source · first reported by watchTowr Labs · last reported
Last reported 18 days ago
What the reports say
1 report, newest first · the exact sentence from each-
You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)“<hxxp://java.sun[.]com/xml/ns/javaee/web-app_3_0.xsd>"”
Indicators reported together
named in the same reports- router[.]javain 1 report
- resourcename[.]mapin 1 report
- hxxp://java.sun[.]com/xml/ns/javaeein 1 report
- hxxp://www.atlassian[.]com/software/jirain 1 report
- crowd[.]propertiesin 1 report
- application[.]namein 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2026-21589
Thanks — we review every report.