{"metadata": {"vulnerability": "CVE-2026-21589", "count": 311, "kinds": {"milestone": 8, "sighting": 266, "kev": 17, "other": 20}, "linked_omitted": 0}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0402", "record": "NCSC-2026-0402", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-01-01T00:00:40.722Z", "date_only": false, "value": "2026-01-01T00:00:40.722Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-21589", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-05T00:00:00Z", "date_only": true, "value": "2026-10-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1264", "record": "CERTFR-2026-AVI-1264", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-10-05T21:30:00.390Z", "date_only": false, "value": "2026-10-05T21:30:00.390Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-21589", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-05T22:00:00Z", "date_only": false, "value": "2026-10-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3755", "record": "WID-SEC-W-2026-3755", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-05T22:00:00Z", "date_only": false, "value": "2026-10-05T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3755", "record": "WID-SEC-W-2026-3755", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-05T22:00:00Z", "date_only": false, "value": "2026-10-05T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3755", "record": "WID-SEC-W-2026-3755", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-05T22:16:58Z", "date_only": false, "value": "2026-10-05T22:16:58Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GR66-X5PQ-8G2G", "record": "GHSA-GR66-X5PQ-8G2G", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-05T22:16:58.423Z", "date_only": false, "value": "2026-10-05T22:16:58.423", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-21589", "record": "FKIE_CVE-2026-21589", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-06T00:00:00Z", "date_only": false, "value": "2026-10-06T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1264", "record": "CERTFR-2026-AVI-1264", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-06T00:00:00Z", "date_only": false, "value": "2026-10-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1264", "record": "CERTFR-2026-AVI-1264", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-10-06T00:07:53.344Z", "date_only": false, "value": "2026-10-06T00:07:53.344480Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx6574gbkm2n", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "760846c6-6d3e-499e-a86e-a7dfdf32ce15", "content": "\ud83d\udea8 CVE-2026-21589 \u2014 CVSS 9.3 CRITICAL\n\nh3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Manageme...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-21589\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mx6574gbkm2n"}, {"timestamp": "2026-10-06T00:25:06Z", "date_only": false, "value": "2026-10-06T00:25:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/risolta-vulnerabilita-in-prodotti-atlassian", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "b75dba80-c5ed-444e-8336-fe91815fecec", "url": "https://www.acn.gov.it/portale/w/risolta-vulnerabilita-in-prodotti-atlassian"}, {"timestamp": "2026-10-06T00:32:50Z", "date_only": false, "value": "2026-10-06T00:32:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GR66-X5PQ-8G2G", "record": "GHSA-GR66-X5PQ-8G2G", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-06T01:30:25.605Z", "date_only": false, "value": "2026-10-06T01:30:25.605340Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117391374738254219", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "102aab6b-d922-48f7-bd3a-bc942b598a54", "content": "CVE-2026-21589 (CRITICAL, CVSS 9.3) in Atlassian Bamboo Data Center <10.2.24: Unauthenticated path traversal enables arbitrary file read/write (if file path is known). Patch to 10.2.24+ required \u2014 no workarounds. Details: https://radar.offseq.com/threat/cve-2026-21589-path-traversal-arbitrary-readwrite-in-atlassian-bamboo-data-center-24a2d0e4e6de8f44 #OffSeq #Atlassian #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/117391374738254219"}, {"timestamp": "2026-10-06T01:30:27.822Z", "date_only": false, "value": "2026-10-06T01:30:27.822027Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx6bsr32vl2y", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "22efb193-e04d-4597-b720-992822d524f3", "content": "Atlassian Bamboo Data Center <10.2.24 is affected by CRITICAL path traversal (CVE-2026-21589). Unauthenticated attackers can read/write files if the path is known. Patch now: https://radar.offseq.com/threat/cve-2026-21589-path-traversal-arbitrary-readwrite-in-atlassian-bamboo-data-center-24a2d0e4...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mx6bsr32vl2y"}, {"timestamp": "2026-10-06T02:08:28.751Z", "date_only": false, "value": "2026-10-06T02:08:28.751740Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mx6dwqbw2c22", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "cda9a443-0d07-41b5-90fc-e74685c9fad7", "content": "Atlassian Data Center vulnerability CVE-2026-21589 (CVSS 9.3) allows arbitrary file access in Jira, Confluence and Bitbucket. Patch now.\n\n#Atlassian #Jira #Confluence #Bitbucket #CVE202621589 #PathTraversal #DataCenter #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mx6dwqbw2c22"}, {"timestamp": "2026-10-06T06:44:05Z", "date_only": false, "value": "2026-10-06T06:44:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/atlassian-security-advisory-av26-1002", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "b31e11be-7240-4ff1-9983-700ae8d790cd", "url": "https://cyber.gc.ca/en/alerts-advisories/atlassian-security-advisory-av26-1002"}, {"timestamp": "2026-10-06T07:10:27Z", "date_only": false, "value": "2026-10-06T07:10:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/10249", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "e1b38d37-3a13-44a9-b816-52c4ec60b531", "content": "\u203c\ufe0f A critical Atlassian vulnerability rated CVSS 9.3 affects 8 Data Center products.\n\nCVE-2026-21589 can let unauthenticated attackers read specific files if they know the exact file path. Internet-facing instances should be upgraded or restricted.\n\nDetails - https://thehackernews.com/2026/10/critical-atlassian-flaw-lets.html", "url": "https://t.me/thehackernews/10249"}, {"timestamp": "2026-10-06T07:39:43.007Z", "date_only": false, "value": "2026-10-06T07:39:43.007182Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx6wh2hvri2i", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "4c183c9f-a1b5-4eae-ab4c-e78fa67bad16", "content": "Atlassian\u88fd\u54c1\u306e\u8106\u5f31\u6027\u300cCVE-2026-21589\u300d\u3001Jira\u30fbConfluence Data Center\u3067\u30d5\u30a1\u30a4\u30eb\u304c\u9732\u51fa\n\nAtlassian\u306f\u3001\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u306b\u95a2\u308f\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306fJira Software Data Center\u3068Confluence Data Center\u306b\u5f71\u97ff\u3057\u307e\u3059\u3002 \u300cCVE-2026-21589\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001CVSS\u30b9\u30b3\u30a2\u304c9.3\u3067\u3059\u3002\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx6wh2hvri2i"}, {"timestamp": "2026-10-06T07:44:49.502Z", "date_only": false, "value": "2026-10-06T07:44:49.502033Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mx6wq5oa6227", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "5b1e52a7-6a25-4347-a8f1-713c6a6fd037", "content": "CVE-2026-21589 lets unauthenticated attackers read specific files from Atlassian Data Center web roots, requiring known paths, and requires upgrading or restricting access.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mx6wq5oa6227"}, {"timestamp": "2026-10-06T07:45:10.370Z", "date_only": false, "value": "2026-10-06T07:45:10.370618Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mx6wqsdhmf2t", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "8951f672-78a3-4eee-9c16-6b4e3cf9d040", "content": "CVE-2026-21589 lets unauthenticated attackers read specific files from Atlassian Data Center web roots, requiring known paths, and requires upgrading or restricting access.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mx6wqsdhmf2t"}, {"timestamp": "2026-10-06T07:45:15.095Z", "date_only": false, "value": "2026-10-06T07:45:15.095380Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mx6wqwvacp2m", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "42756456-70d3-472c-b83d-69dccb17706d", "content": "CVE-2026-21589 lets unauthenticated attackers read specific files from Atlassian Data Center web roots, requiring known paths, and requires upgrading or restricting access.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mx6wqwvacp2m"}, {"timestamp": "2026-10-06T08:04:24Z", "date_only": false, "value": "2026-10-06T08:04:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/17316", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "f121f4a2-01e4-462f-b872-457ce78e22c6", "content": "Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center \u2013 gbhackers.com\n\nTue, 06 Oct 2026 15:29:01", "url": "https://t.me/MalaysiaHacktivistz/17316"}, {"timestamp": "2026-10-06T08:04:24Z", "date_only": false, "value": "2026-10-06T08:04:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/26710", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "ac67186e-2995-4186-a236-c56d8c75f536", "content": "Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center \u2013 gbhackers.com\n\nTue, 06 Oct 2026 15:29:01", "url": "https://t.me/MalaysiaHacktivistz/26710"}, {"timestamp": "2026-10-06T08:04:25Z", "date_only": false, "value": "2026-10-06T08:04:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/15501", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "5ac3b616-e9ec-4f30-9f49-427f509eb6a1", "content": "Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center \u2013 gbhackers.com\n\nTue, 06 Oct 2026 15:29:01", "url": "https://t.me/TengkorakCyberCrewzz/15501"}, {"timestamp": "2026-10-06T08:07:09.480Z", "date_only": false, "value": "2026-10-06T08:07:09.480916Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mx6xy42reb2n", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "3cd645e0-9157-4077-8fdd-30b077f8894b", "content": "Atlassian Patches CVE-2026-21589: Path Traversal Hits 8 Data Center Products at CVSS 9.3", "url": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mx6xy42reb2n"}, {"timestamp": "2026-10-06T08:38:34.139Z", "date_only": false, "value": "2026-10-06T08:38:34.139272Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mx6zqc2xgj2q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "05c02f19-4bb0-4d55-8ad7-b041636c808d", "content": "\ud83e\udd16 CVE-2026-21589 (CVSS 9.3): unauthenticated file read in 8 self-hosted Atlassian Data Center products. Needs a file's exact name/path, no dir listing. Fixed versions out \u2014 restrict public access until upgrade.\nhttps://thehackernews.com/2026/10/critical-atlassian-flaw-lets.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mx6zqc2xgj2q"}, {"timestamp": "2026-10-06T08:59:20.498Z", "date_only": false, "value": "2026-10-06T08:59:20.498922Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117393139954881746", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "7eccb3ce-32a1-4363-8d89-63022fa448dc", "content": "Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products\nA critical flaw (CVE-2026-21589, CVSS 9.3) in eight Atlassian Data Center products allows an unauthenticated attacker to read known files from each product\u2019s web application root directory. The attacker must know a file\u2019s exact name and path; listing directory contents is not possible. Atlassian disclosed the issue on October 5 and urges customers to patch. https://thehackernews.com/2026/10/critical-atlassian-flaw-lets.html", "url": "https://infosec.exchange/users/edwardk/statuses/117393139954881746"}, {"timestamp": "2026-10-06T08:59:21.237Z", "date_only": false, "value": "2026-10-06T08:59:21.237831Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mx72vhhefg26", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "dcc77b46-7764-4151-a893-b8e0f363fc9e", "content": "Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products\n\nA critical flaw (CVE-2026-21589, CVSS 9.3) in eight Atlassian Data Center products allows an unauthenticated attacker to r... https://threatintel.cc/2026/10/06/critical-atlassian-flaw-lets-unauthenticated.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mx72vhhefg26"}, {"timestamp": "2026-10-06T09:06:55.415Z", "date_only": false, "value": "2026-10-06T09:06:55.415528Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mx73cxnpkm2m", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "17deeb14-64fd-4bdc-8e2f-ead1cbfaf6bb", "content": "Critical Atlassian flaw CVE-2026-21589 patched\u2014update Jira, Confluence, Bitbucket asap. #SecurityNews #Atlassian #CVE2026-21589 #Vulnerability #InfoSec #Cybersecurity https://thedailytechfeed.com/atlassian-rushes-out-fixes-for-critical-file-access-exploit/", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mx73cxnpkm2m"}, {"timestamp": "2026-10-06T10:15:29.642Z", "date_only": false, "value": "2026-10-06T10:15:29.642025Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mx775luty526", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "af2d870f-e851-48c4-be61-a0b3f1b691d5", "content": "Atlassian disclosed CVE-2026-21589, a critical path traversal flaw in 8 Data Center products that can let unauthenticated attackers read known files from the web root. #Atlassian #CVE202621589 #Jira", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mx775luty526"}, {"timestamp": "2026-10-06T10:31:42Z", "date_only": false, "value": "2026-10-06T10:31:42.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/LoTGJwSdJ9EUN-9zxAbBV4yPateFOBlMwANgBNI9_Qj9bw", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "9635a204-ff55-4775-96dc-fcda1044f04e"}, {"timestamp": "2026-10-06T11:31:49.871Z", "date_only": false, "value": "2026-10-06T11:31:49.871000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "286d4f83-c688-4f99-b971-c1b1c0f71697", "url": "https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-06T12:30:37.120Z", "date_only": false, "value": "2026-10-06T12:30:37.120791Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mx7gp5jofk2y", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "e3089269-c2d8-4cda-97b1-a8bc43b43de3", "content": "Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/10/06/a...\n\n#Atlassian #vulnerability #cybersecurity", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3mx7gp5jofk2y"}, {"timestamp": "2026-10-06T12:40:06.564Z", "date_only": false, "value": "2026-10-06T12:40:06.564375Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx7ha7a23h2n", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "5bd31e95-46ed-4d0f-9c62-bd11c26c1a22", "content": "Atlassian\u3001Data Center\u306e\u91cd\u5927\u306a\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u8106\u5f31\u6027\uff08CVE-2026-21589\uff09\u3067\u76f4\u3061\u306b\u30d1\u30c3\u30c1\u9069\u7528\u3092\u547c\u3073\u304b\u3051\n\nAtlassian\u306f\u3001\u4fdd\u5b58\u5834\u6240\u3092\u77e5\u3063\u3066\u3044\u308b\u653b\u6483\u8005\u304c\u30ed\u30b0\u30a4\u30f3\u306a\u3057\u3067Atlassian Data Center\u74b0\u5883\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308c\u308b\u3068\u3057\u3066\u3001\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u307e\u3059\u3002 CVE-2026-21589\u306e\u6982\u8981 CVE-2026-21589\u306f\u3001CVSS\u30b9\u30b3\u30a29.3\u306e\u91cd\u5927\u306a\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u306e\u8106\u5f31\u6027\u3067\u3059\u3002Bi", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx7ha7a23h2n"}, {"timestamp": "2026-10-06T12:48:27.154Z", "date_only": false, "value": "2026-10-06T12:48:27.154536Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mx7hp3mpnu22", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "e37784b9-ddc0-4717-95ec-464f6b8913a1", "content": "Atlassian has issued a critical security alert regarding CVE-2026-21589, a 9.3-rated arbitrary file access vulnerability in its datacenter products, including Bitbucket, Confluence, and Jira.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mx7hp3mpnu22"}, {"timestamp": "2026-10-06T12:51:12.748Z", "date_only": false, "value": "2026-10-06T12:51:12.748709Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mx7hu25ykx2w", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "3530ccc5-84bb-4875-a1e6-763fa3960be2", "content": "Critical Atlassian Flaw (CVE-2026-21589) Exposes Files Across Jira, Confluence, Bitbucket, and 5 More Products: Unauthenticated Attackers\u00a0Affected\n\nCVE-2026-21589 is a critical Atlassian path traversal flaw rated CVSS\u2026\n\nhttps://thecybersecguru.com/exploits/cve-2026-21589-atlassian-vulnerability/", "url": "https://bsky.app/profile/thecybersecguru.com/post/3mx7hu25ykx2w"}, {"timestamp": "2026-10-06T12:52:46.802Z", "date_only": false, "value": "2026-10-06T12:52:46.802866Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mx7hwsta4k2o", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "f8dde552-58e2-421d-942b-7b1ec60d5c1a", "content": "Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)\n\nwww.helpnetsecurity.com/2026/10/06/a...\n\n#Kyberturvallisuus #LaajaVaikutus #Haavoittuvuus", "url": "https://bsky.app/profile/hapsis.bsky.social/post/3mx7hwsta4k2o"}, {"timestamp": "2026-10-06T13:10:17.839Z", "date_only": false, "value": "2026-10-06T13:10:17.839620Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mx7iw6l5fd24", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "9612ab65-a5ab-4d67-af36-f78f06c6e963", "content": "\ud83d\udd17 CVE : CVE-2019-13990, CVE-2022-1471, CVE-2022-23521, CVE-2022-41903, CVE-2023-22518, CVE-2023-22522, CVE-2023-22523, CVE-2023-22524, CVE-2023-22527, CVE-2023-46604, CVE-2026-21589", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mx7iw6l5fd24"}, {"timestamp": "2026-10-06T14:15:14.724Z", "date_only": false, "value": "2026-10-06T14:15:14.724208Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mx7mkco2e42s", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "24f13c65-bf15-4032-9767-038541c255e8", "content": "Atlassian patches CVE-2026-21589 (CVSS 9.3): unauthenticated path traversal across 8 Data Center products. Patches out Oct 6. #infosec https://0daynews.com/articles/2026-10-06-atlassian-cve-2026-21589-path-traversal-8-products/", "url": "https://bsky.app/profile/0daynews.bsky.social/post/3mx7mkco2e42s"}, {"timestamp": "2026-10-06T14:29:51.202Z", "date_only": false, "value": "2026-10-06T14:29:51.202441Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mx7nege67z23", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "5d67c734-a416-487a-98e9-c54d0ef599e5", "content": "Atlassian patches critical arbitrary file access flaw (CVE-2026-21589) in Jira, Confluence, & more. Rated 9.3 CVSS, it allows unauthenticated access to web root files. #Atlassian #Jira #Confluence #Vulnerability #CVE202621589\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mx7nege67z23"}, {"timestamp": "2026-10-06T15:53:04Z", "date_only": false, "value": "2026-10-06T15:53:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/3464", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "1775e3c8-20c4-4cbf-a018-e8357992fa65", "content": "\ud83d\udd34 Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products\n\nA critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product's web application root directory.\n\nThe attacker must already know a file's exact name and path and cannot list what the directory holds. Atlassian disclosed the flaw, CVE-2026-21589, on October 5, rated it 9.3 out of 10, and listed a fixed version for each product.\n\nThe web application root directory is the folder on the server that holds the web application itself. In some configurations, it may contain sensitive files, which raises the risk, according to Atlassian.", "url": "https://t.me/pphm_HackerNews/3464"}, {"timestamp": "2026-10-06T16:06:13.563Z", "date_only": false, "value": "2026-10-06T16:06:13.563449Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mx7sqrabb72o", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "6e0a3c3d-3561-4f61-9aba-2e5b49cd6de5", "content": "~Cybergcca~\nUpdate Atlassian products for arbitrary file access and apply Android\u2019s October security rollup.\n-\nIOCs: CVE-2026-21589\n-\n#Android #CVE-2026-21589 #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mx7sqrabb72o"}, {"timestamp": "2026-10-06T16:47:26.970Z", "date_only": false, "value": "2026-10-06T16:47:26.970419Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0402", "record": "NCSC-2026-0402", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-06T16:47:26.970Z", "date_only": false, "value": "2026-10-06T16:47:26.970419Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0402", "record": "NCSC-2026-0402", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-06T16:47:26.970Z", "date_only": false, "value": "2026-10-06T16:47:26.970419Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0402", "record": "NCSC-2026-0402", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-06T17:24:30.846Z", "date_only": false, "value": "2026-10-06T17:24:30.846479Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mx7x4r5t2u2g", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "43554e57-9537-4368-b01c-941f7cbd1833", "content": "You Won\u2019t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) - watchTowr Labs", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3mx7x4r5t2u2g"}, {"timestamp": "2026-10-06T17:33:29.337Z", "date_only": false, "value": "2026-10-06T17:33:29.337296Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mx7xmr3oib2a", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "edf47e96-4d24-47b7-9ce2-e90bd6fca9ac", "content": "You Won\u2019t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) - watchTowr Labs", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mx7xmr3oib2a"}, {"timestamp": "2026-10-06T17:35:25.676Z", "date_only": false, "value": "2026-10-06T17:35:25.676456Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mx7xqb5tow2n", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "e2355040-7614-41e9-8f5b-a22820b14484", "content": "Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket.", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3mx7xqb5tow2n"}, {"timestamp": "2026-10-06T17:41:38.969Z", "date_only": false, "value": "2026-10-06T17:41:38.969776Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx7y3fet2j2u", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "c1e31783-4bf9-472a-a21b-f8e60f42c7fb", "content": "Atlassian\u3001Jira\u3068Confluence\u306e\u91cd\u5927\u306a\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u8106\u5f31\u6027\u3067\u8b66\u544a\n\nAtlassian\u306f\u3001Confluence\u3084Jira\u3001Bitbucket\u306a\u3069\u3001\u30bb\u30eb\u30d5\u30db\u30b9\u30c8\u578b\u306eData Center\u88fd\u54c1\u306e\u8907\u6570\u3067\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u306b\u60aa\u7528\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cCVE-2026-21589\u300d\u306b\u3064\u3044\u3066\u3001\u5229\u7528\u8005\u306b\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u3092\u7a81\u304b\u308c\u308b\u3068\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u3001\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30a2", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx7y3fet2j2u"}, {"timestamp": "2026-10-06T18:00:27.272Z", "date_only": false, "value": "2026-10-06T18:00:27.272209Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yasna.io/post/3mx7z4yvutf2u", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "00237568-bb7a-42ea-a5d4-e1ae60f5e758", "content": "Atlassian warned of a critical file-access flaw in multiple Data Center products allowing unauthenticated attackers to read known files, rated severity 9.3/10.\n\nCVE-2026-21589 #Flaw #CVE #infosec\n\nFull synthesis & sources: yasna.io", "url": "https://bsky.app/profile/yasna.io/post/3mx7z4yvutf2u"}, {"timestamp": "2026-10-06T18:01:41.725Z", "date_only": false, "value": "2026-10-06T18:01:41.725299Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mx7z7alhtk2a", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "6ecad19b-1717-43b1-bf68-74629c8133a2", "content": "\ud83d\udcf0 Atlassian warns of critical file-access flaw in Jira, Confluence\n\nAtlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file...\n\nhttps://tinyurl.com/2dgmzwt9 #TechNews #CrustyTLDR", "url": "https://bsky.app/profile/crustytldr.bsky.social/post/3mx7z7alhtk2a"}, {"timestamp": "2026-10-06T18:08:10Z", "date_only": false, "value": "2026-10-06T18:08:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BleepingComputer/25736", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "db8ea1b9-0d1b-4b7d-8e4a-c777322cb47f", "content": "\u200aAtlassian warns of critical file-access flaw in Jira, Confluence\n\nAtlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket. [...]\n\nhttps://www.bleepingcomputer.com/news/security/atlassian-warns-of-critical-file-access-flaw-in-jira-confluence/", "url": "https://t.me/BleepingComputer/25736"}, {"timestamp": "2026-10-06T18:38:05.608Z", "date_only": false, "value": "2026-10-06T18:38:05.608303Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mxa3acb2y42r", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "4be6d33b-7689-426c-ac0f-c3ab9b310945", "content": "Atlassian warns of critical file access flaw in its datacenter products (CVE-2026-21589) #patchmanagement", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mxa3acb2y42r"}, {"timestamp": "2026-10-06T19:00:07Z", "date_only": false, "value": "2026-10-06T19:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104470", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "551083af-be4a-4912-9ecd-509a3052cf00", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-21589-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-06 18:34:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-21589 \u2013 Atlassian Data Center Unauth Arbitrary File Read (CVSS 9.3) | Red/Blue Team suite. 2 tools: Full Exploit (path traversal, WEB-INF read, credential harvest, 8 products, mass scan, SOCKS5/Tor, stealth) & SafeChecker (non-intrusive version audit, IoC guidance, JSON/CSV). Use Ethically, Stay Legal.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104470", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-06T19:00:19Z", "date_only": false, "value": "2026-10-06T19:00:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cx0arTGs8DNguB5K-kAzeoiy94mzj0RIYFYlFCFJPk34LAs", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "bed66cb9-83ca-4a18-8c1c-b9a4700edf07", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-06T19:00:19Z", "date_only": false, "value": "2026-10-06T19:00:19.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cx0arTGs8DNguB5K-kAzeoiy94mzj0RIYFYlFCFJPk34LAs", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "0a9e5bad-c9dd-43da-9703-0e8c95cf7715"}, {"timestamp": "2026-10-06T19:00:45.635Z", "date_only": false, "value": "2026-10-06T19:00:45.635646Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mxa4ihltutm2", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "ece8d972-376b-4eab-afaf-344ff77f3725", "content": "You Won\u2019t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/", "url": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mxa4ihltutm2"}, {"timestamp": "2026-10-06T19:07:10.130Z", "date_only": false, "value": "2026-10-06T19:07:10.130220Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxa4uc66wj2f", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "dad49416-bd3c-4e3b-9942-f288f08d0eee", "content": "\ud83e\udd16 CVE-2026-21589: critical arbitrary file-access flaw in self-hosted Atlassian Data Center (Confluence, Jira, Bitbucket). Immediate patching advised.\nhttps://www.bleepingcomputer.com/news/security/atlassian-warns-of-critical-file-access-flaw-in-jira-confluence/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxa4uc66wj2f"}, {"timestamp": "2026-10-06T19:16:07.139Z", "date_only": false, "value": "2026-10-06T19:16:07.139817Z", "kind": "sighting", "label": "Published proof of concept", "source": "Previdian Early Warning email notification", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "7203bf55-35b6-468f-8c79-a5889be2190f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-06T20:06:03.167Z", "date_only": false, "value": "2026-10-06T20:06:03.167201Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxaa5meana2y", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "e1e69587-3f44-4f01-a0fa-5b83463db79d", "content": "~Watchtowr~\nPre-auth arbitrary file read affects Jira, Confluence, Bitbucket and more; exposed Crowd credentials can enable admin takeover.\n-\nIOCs: CVE-2026-21589\n-\n#Atlassian #CVE202621589 #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mxaa5meana2y"}, {"timestamp": "2026-10-06T20:39:22.148Z", "date_only": false, "value": "2026-10-06T20:39:22.148057Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/timb.me.uk/post/3mxabz2chufs2", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "3aafb8cb-509b-41b5-b334-74a7b9e6ac78", "content": "Oopsies:\n\nhttps://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/\n\n#atlassian, #threatintel", "url": "https://bsky.app/profile/timb.me.uk/post/3mxabz2chufs2"}, {"timestamp": "2026-10-06T21:08:13Z", "date_only": false, "value": "2026-10-06T21:08:13.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-21589.yaml", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "7be97f6c-e197-4217-a78a-2086d28894b9", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-21589.yaml"}, {"timestamp": "2026-10-06T21:15:27.279Z", "date_only": false, "value": "2026-10-06T21:15:27.279933Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxadzoqa2t2d", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "8a465d53-ee56-4fd4-9ca2-5c6651525747", "content": "Atlassian disclosed CVE-2026-21589, a critical unauthenticated file-access flaw in self-hosted Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible, and Fisheye. #Atlassian #Jira #Confluence", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxadzoqa2t2d"}, {"timestamp": "2026-10-06T21:52:24.144Z", "date_only": false, "value": "2026-10-06T21:52:24.144612Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/securestep9/statuses/117396179743833662", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "ed8c0b7f-af15-424f-8441-cca10742e060", "content": "Using #Atlassian products like #Confluence, #Jira or #Bitbucket on-premise?\nCritical vulnerability CVE-2026-21589 (CVSS 9.3) lets unauthenticated attackers read known web-root files across 8 Atlassian products. Patch affected self-hosted instances now!\ud83d\udc47https://thehackernews.com/2026/10/critical-atlassian-flaw-lets.html", "url": "https://infosec.exchange/users/securestep9/statuses/117396179743833662"}, {"timestamp": "2026-10-06T21:52:25.376Z", "date_only": false, "value": "2026-10-06T21:52:25.376927Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mxag3sbcsm2t", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "699009dc-1286-4b56-95f7-0d88f6e2655a", "content": "Using #Atlassian products like #Confluence, #Jira or #Bitbucket on-premise?\n\nCritical vulnerability CVE-2026-21589 (CVSS 9.3) lets unauthenticated attackers read known web-root files across 8 Atlassian products. Patch affected self-hosted instances now!\n\ud83d\udc47", "url": "https://bsky.app/profile/securestep9.bsky.social/post/3mxag3sbcsm2t"}, {"timestamp": "2026-10-06T21:55:50Z", "date_only": false, "value": "2026-10-06T21:55:50+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-21589", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ca794994-53b1-4f27-8263-ee62a3eb8e2c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-06T21:55:50Z", "date_only": false, "value": "2026-10-06T21:55:50+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-21589", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ca794994-53b1-4f27-8263-ee62a3eb8e2c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-06T21:55:50Z", "date_only": false, "value": "2026-10-06T21:55:50+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-21589", "field": "status.status_updated_at", "uuid": "ca794994-53b1-4f27-8263-ee62a3eb8e2c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-06T21:55:50.336Z", "date_only": false, "value": "2026-10-06T21:55:50.336Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-21589", "field": "evidence.0.details.added_date", "uuid": "ca794994-53b1-4f27-8263-ee62a3eb8e2c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-06T22:00:00Z", "date_only": false, "value": "2026-10-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3755", "record": "WID-SEC-W-2026-3755", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-06T22:00:00Z", "date_only": false, "value": "2026-10-06T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3755", "record": "WID-SEC-W-2026-3755", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-06T22:33:31Z", "date_only": false, "value": "2026-10-06T22:33:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fUNd00idDC0NCj01BnsP2udEQD17B8vfdDBi9shVTP6CUc8", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "9b04728f-eb36-461c-89fd-9367c930c1dc", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-06T22:33:31Z", "date_only": false, "value": "2026-10-06T22:33:31.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/fUNd00idDC0NCj01BnsP2udEQD17B8vfdDBi9shVTP6CUc8", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "25bb4fbb-946e-4384-9430-51c6b7bad3c3"}, {"timestamp": "2026-10-06T22:40:00.717Z", "date_only": false, "value": "2026-10-06T22:40:00.717068Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxaiqvhdvp2k", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "f82e263c-11cd-442e-86e1-b089284e7931", "content": "Jira\u3001Confluence\u7b49\u3067\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u3092\u53ef\u80fd\u306b\u3059\u308b\u8106\u5f31\u6027\uff08CVE-2026-21589\uff09\u304c\u78ba\u8a8d\u3055\u308c\u307e\u3057\u305f\u3002", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mxaiqvhdvp2k"}, {"timestamp": "2026-10-06T23:00:20Z", "date_only": false, "value": "2026-10-06T23:00:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ca4LUgHaPf7SnlvWANBEFLlvL974Tb9uhxxu25ElKUB_LXg", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "ec3f1056-dc6e-40f8-b7a6-ca20b50af532", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-06T23:00:20Z", "date_only": false, "value": "2026-10-06T23:00:20.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ca4LUgHaPf7SnlvWANBEFLlvL974Tb9uhxxu25ElKUB_LXg", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "da865cb0-6070-40df-8a02-88903d79c36a"}, {"timestamp": "2026-10-06T23:00:34Z", "date_only": false, "value": "2026-10-06T23:00:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/44778", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "bfe2515d-15b9-429c-92e6-320c091f3ce0", "content": "Atlassian warns of critical file-access flaw in Jira, Confluence\n\nAtlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket. [...]\nhttps://www.bleepingcomputer.com/news/security/atlassian-warns-of-critical-file-access-flaw-in-jira-confluence/", "url": "https://t.me/VulnerabilityNews/44778"}, {"timestamp": "2026-10-07T00:00:00Z", "date_only": false, "value": "2026-10-07T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1264", "record": "CERTFR-2026-AVI-1264", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-10-07T00:00:00Z", "date_only": false, "value": "2026-10-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1264", "record": "CERTFR-2026-AVI-1264", "field": "revisions.1.revision_date", "linked_record": true}, {"timestamp": "2026-10-07T00:15:09Z", "date_only": false, "value": "2026-10-07T00:15:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-critical-unauthenticated-path-traversal-atlassian-bitbucket-jira-confluence", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "4b80a058-208a-4989-add1-4ba32ded69d6", "url": "https://ccb.belgium.be/advisories/warning-critical-unauthenticated-path-traversal-atlassian-bitbucket-jira-confluence"}, {"timestamp": "2026-10-07T00:55:06.657Z", "date_only": false, "value": "2026-10-07T00:55:06.657839Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/densuke.bsky.social/post/3mxaqcg6zkv2w", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "4aeb0ed6-4cf2-48cd-8df9-d4aac25d41f8", "content": "\u66f4\u65b0\u3055\u308c\u305f\u3088\u3001\u898b\u306b\u6765\u3066\u306d!\u2192 \n\n\u5171\u6709\u306e\u90e8\u54c1\u306f\u3001\u58ca\u308c\u308b\u3068\u304d\u3082\u4e00\u7dd2\uff1f Atlassian CVE-2026-21589\u30fbLinux ZRAM \u306e\u4f5c\u308a\u76f4\u3057\u30fbLinux Plumbers Conference 2026\u30fbmold 3.0\uff08Rust\uff09\u30fbLinux 35\u5468\u5e74\uff082026/10/7 Linux\u30fbOSS\u30c8\u30ec\u30f3\u30c9\uff09 https://blog.fuga.jp/posts/2026-10-07-linux-oss-trend/", "url": "https://bsky.app/profile/densuke.bsky.social/post/3mxaqcg6zkv2w"}, {"timestamp": "2026-10-07T01:38:01.166Z", "date_only": false, "value": "2026-10-07T01:38:01.166816Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mxasp7kz562i", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "ff7f0afd-ae9b-4e45-bbe5-6ca4d5ee77eb", "content": "CVE-2026-21589 is trending. Hype score 4, currently #5 on cvemon.\n\nThis is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center,\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-21589", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mxasp7kz562i"}, {"timestamp": "2026-10-07T01:44:13.161Z", "date_only": false, "value": "2026-10-07T01:44:13.161056Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mxat2bgmgs2y", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "c383c5eb-6035-4c7f-9458-662986eb4744", "content": "\u3010\u7dca\u6025\u3011Atlassian Data Center\u88fd\u54c1\u306b\u8106\u5f31\u6027\uff08CVE-2026-21589 / CVSS v4.0 9.3\uff09\n\nConfluence\u30fbJira\u7b49\u3067\u3001\u8a8d\u8a3c\u306a\u3057\u306bWeb\u30eb\u30fc\u30c8\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307e\u308c\u308b\u6050\u308c\u3002\u60aa\u7528\u306f\u516c\u5f0f\u306b\u8a18\u8f09\u306a\u3057\u3002\n\u5bfe\u51e6: \u4fee\u6b63\u7248\u3078\u66f4\u65b0\u3002\u3067\u304d\u306a\u3051\u308c\u3070WAF\u3067\u300c..\u300d\u3092\u906e\u65ad\u3002\n\nforsmile.jp/articles/atl...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "url": "https://bsky.app/profile/forsmile.jp/post/3mxat2bgmgs2y"}, {"timestamp": "2026-10-07T02:13:20.081Z", "date_only": false, "value": "2026-10-07T02:13:20.081578Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxauoe25cr2h", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "83700dc1-7683-4812-a340-90d7f5c4af3a", "content": "CVE-2026-21589 is a critical unauthenticated arbitrary file access flaw in multiple Atlassian Data Center products, requiring immediate patching or isolation.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxauoe25cr2h"}, {"timestamp": "2026-10-07T02:13:33.821Z", "date_only": false, "value": "2026-10-07T02:13:33.821539Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxauor5a2f26", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "220f7aae-db69-44f2-8144-9644b65e433b", "content": "CVE-2026-21589 is a critical unauthenticated arbitrary file access flaw in multiple Atlassian Data Center products, requiring immediate patching or isolation.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mxauor5a2f26"}, {"timestamp": "2026-10-07T02:13:36.091Z", "date_only": false, "value": "2026-10-07T02:13:36.091384Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxauoss7ni24", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "48096d94-69c6-4ed2-aee6-06ce34508cec", "content": "CVE-2026-21589 is a critical unauthenticated arbitrary file access flaw in multiple Atlassian Data Center products, requiring immediate patching or isolation.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxauoss7ni24"}, {"timestamp": "2026-10-07T03:00:06Z", "date_only": false, "value": "2026-10-07T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/zKpvxquU57guxyequhuVUVbCNW9dnMXvSRGsdxeOS74hPDU", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "b05515ef-619e-4b2c-8fec-36e5b144b48d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-07T03:00:06Z", "date_only": false, "value": "2026-10-07T03:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/zKpvxquU57guxyequhuVUVbCNW9dnMXvSRGsdxeOS74hPDU", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "2cd688d7-1ebc-4261-af7a-efbf96f9f36e"}, {"timestamp": "2026-10-07T03:17:09.496Z", "date_only": false, "value": "2026-10-07T03:17:09.496076Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxayahxvrg2q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "f9929cea-63ae-40b3-bd60-946e4b90fec4", "content": "\ud83e\udd16 CVE-2026-21589 (critical): unauthenticated arbitrary file access in self-hosted Atlassian Data Center (Jira, Confluence, Bitbucket). Patched; no known exploitation.\nhttps://www.bleepingcomputer.com/news/security/atlassian-warns-of-critical-file-access-flaw-in-jira-confluence/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxayahxvrg2q"}, {"timestamp": "2026-10-07T03:39:32.585Z", "date_only": false, "value": "2026-10-07T03:39:32.585935Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mxaziinnce2o", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "46f188f6-e5ff-461d-aee1-544babd37d54", "content": "You Won\u2019t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mxaziinnce2o"}, {"timestamp": "2026-10-07T04:00:46.257Z", "date_only": false, "value": "2026-10-07T04:00:46.257470Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mxb2oh3su72j", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "088e38eb-655e-437e-b42e-6c92502ef2f1", "content": "BREAKING: Atlassian CVE-2026-21589 (CVSS 9.3) \u2014 unauth file read in 8 Data Center products. Patch now; take offline if can't upgrade. (The Hacker News) #CyberSecurity", "url": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mxb2oh3su72j"}, {"timestamp": "2026-10-07T05:03:25.132Z", "date_only": false, "value": "2026-10-07T05:03:25.132429Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mxb656uadsdb", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "f7eede59-cce5-48c1-ac29-8acc3dc76e47", "content": "Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center https://gbhackers.com/atlassian-cve-2026-21589-flaw/", "url": "https://bsky.app/profile/shiojiri.com/post/3mxb656uadsdb"}, {"timestamp": "2026-10-07T05:57:30.404Z", "date_only": false, "value": "2026-10-07T05:57:30.404473Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mxbb766th224", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "e040acc5-6388-4d07-b16e-36f2eeb79a65", "content": "Atlassian: CVE-2026-21589 - Arbitrary File Access Vulnerability impacts\nMultiple Products\nURL: confluence.atlassian.com/security/cve...\nClassification: Critical, Solution: Official Fix, Exploit Maturity: Proof-of-Concept, CVSSv4.0: 9.3", "url": "https://bsky.app/profile/samilaiho.com/post/3mxbb766th224"}, {"timestamp": "2026-10-07T05:57:51.276Z", "date_only": false, "value": "2026-10-07T05:57:51.276321Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mxbb7tberb22", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "61c52ccd-ad75-47e9-9426-71e8e09648c0", "content": "\u2022 Atlassian CVE-2026-21589 (critique) : Jira/Confluence/Bitbucket auto-h\u00e9berg\u00e9s\nhttps://www.bleepingcomputer.com/news/security/atlassian-warns-of-critical-file-access-flaw-in-jira-confluence/", "url": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mxbb7tberb22"}, {"timestamp": "2026-10-07T06:01:24.776Z", "date_only": false, "value": "2026-10-07T06:01:24.776861Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/raven-sec.bsky.social/post/3mxbbg3gil2ax", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "429a39f3-121d-4844-9822-3760e698eeb8", "content": "IBM Langflow & X.Org hit by critical RCE flaws\u2014patch urgently\n\n\u2022 Langflow CVE-2026-97679: CVSS 8.8 RCE\n\u2022 X.Org: 12 vulns, 9 ACE flaws patched\n\u2022 Atlassian CVE-2026-21589 critical flaw\n\n4 sources verified \u00b7 hackingallthethings.com\n#infosec #threatintel #cybersecurity #CriticalVulnerability #Patching", "url": "https://bsky.app/profile/raven-sec.bsky.social/post/3mxbbg3gil2ax"}, {"timestamp": "2026-10-07T06:28:45.771Z", "date_only": false, "value": "2026-10-07T06:28:45.771244Z", "kind": "sighting", "label": "Seen", "source": "https://chaos.social/users/christopherkunz/statuses/117398209865608211", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "16872415-5409-4cd6-92a6-0ec6edb350ce", "content": "OK, this is an innovative directory traversal vuln:GET /download/resources/jira.webresources:color-picker-popup/images/..::..::..::..::..::WEB-INF::web.xml HTTP/1.1\nThis is from CVE-2026-21589, https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/ \nThe \"::\" gets replaced with \"/\" by some weird sanitation method, read more about it in the writeup.\nTagging @nynbinary for humorous memeing.", "url": "https://chaos.social/users/christopherkunz/statuses/117398209865608211"}, {"timestamp": "2026-10-07T06:34:30.507Z", "date_only": false, "value": "2026-10-07T06:34:30.507495Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/christopherkunz.bsky.social/post/3mxbdbektrv2j", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "ce945b69-3ec6-49a1-b920-16068b219398", "content": "This is from CVE-2026-21589, https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/\n\nThe \"::\" gets replaced with \"/\" by some weird sanitation method, read more about it in the writeup. [2/3]", "url": "https://bsky.app/profile/christopherkunz.bsky.social/post/3mxbdbektrv2j"}, {"timestamp": "2026-10-07T06:36:39.031Z", "date_only": false, "value": "2026-10-07T06:36:39.031965Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxbdf6vnok24", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "6368ddf0-2bf3-465d-a3b6-7cb21db067d6", "content": "Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)\n\nAttackers who know where to look can read files from Atlassian Data Center installations without logging in, the company has warned. About CVE-2026-21589 CVE-2026-21589, a critic\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxbdf6vnok24"}, {"timestamp": "2026-10-07T07:00:48.765Z", "date_only": false, "value": "2026-10-07T07:00:48.765452Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxbeqf32um24", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "c5a4a8b2-4a41-417b-a818-ba5c0539a9f4", "content": "CVE-2026-21589 enables unauthenticated arbitrary file access in multiple Atlassian Data Center products, requiring exact file paths and fixed by specific version patches.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxbeqf32um24"}, {"timestamp": "2026-10-07T07:01:51.594Z", "date_only": false, "value": "2026-10-07T07:01:51.594776Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxbesbkbs22m", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "37c6f8fe-dce3-49b9-9918-e38945f87224", "content": "CVE-2026-21589 enables unauthenticated arbitrary file access in multiple Atlassian Data Center products, requiring exact file paths and fixed by specific version patches.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxbesbkbs22m"}, {"timestamp": "2026-10-07T07:01:57.177Z", "date_only": false, "value": "2026-10-07T07:01:57.177901Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxbesg626s2t", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "e95c91c0-1048-4569-81a8-6d8e43b53d53", "content": "CVE-2026-21589 enables unauthenticated arbitrary file access in multiple Atlassian Data Center products, requiring exact file paths and fixed by specific version patches.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mxbesg626s2t"}, {"timestamp": "2026-10-07T07:04:12.831Z", "date_only": false, "value": "2026-10-07T07:04:12.831902Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxbewidhjl2v", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "24f3a62c-eb8c-44c7-922c-e5d7fa1c0295", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) (suite)\n\u2022 Twenty (CRM open source) (CVE-2026-105763), CVSS 9.6 (Twenty)\n\u2022 Atlassian Data Center (CVE-2026-21589), CVSS 9.3 (Atlassian)\n\u2022 HPE Integrated Lights-Out (iLO) 7 (CVE-2026-79820), CVSS 9.0 (HPE)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mxbewidhjl2v"}, {"timestamp": "2026-10-07T07:13:12.347Z", "date_only": false, "value": "2026-10-07T07:13:12.347617Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mxbfghpynv2v", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "0cfacb96-3356-40fc-ac40-0cc45738ccd3", "content": "Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)\n\uff08Atlassian\u3001Data Center\u88fd\u54c1\u306e\u91cd\u5927\u306a\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u8106\u5f31\u6027\u306b\u5373\u6642\u5bfe\u5fdc\u3092\u8981\u8acb\uff09 #HelpNetSecurity (Oct 6)\nwww.helpnetsecurity.com/2026/10/06/a...", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mxbfghpynv2v"}, {"timestamp": "2026-10-07T07:35:20.484Z", "date_only": false, "value": "2026-10-07T07:35:20.484762Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxbgo54juh2r", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "306b23e1-3d46-445d-9e20-eb00514f41f6", "content": "CVE-2026-21589 exploitation is underway against Atlassian servers after researchers published arbitrary file read PoC and technical details.\n\n#Atlassian #Jira #Confluence #Bitbucket #CVE202621589 #PathTraversal #ExploitedInTheWild #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxbgo54juh2r"}, {"timestamp": "2026-10-07T07:41:32.108Z", "date_only": false, "value": "2026-10-07T07:41:32.108739Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxbgza2ol62f", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "de308a66-22d6-4029-9210-dc7da8b0e6e3", "content": "Top 3 CVE for last 7 days:\nCVE-2026-104286: 39 interactions\nCVE-2026-88779: 39 interactions\nCVE-2026-88771: 34 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-21589: 29 interactions\nCVE-2026-86360: 8 interactions\nCVE-2023-28252: 7 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxbgza2ol62f"}, {"timestamp": "2026-10-07T08:00:49.916Z", "date_only": false, "value": "2026-10-07T08:00:49.916+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3755", "record": "WID-SEC-W-2026-3755", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-07T09:00:30.466Z", "date_only": false, "value": "2026-10-07T09:00:30.466729Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117398806855479240", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "5a1fb34d-72a7-4dbe-92c3-33378eb9a483", "content": "Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products\nAtlassian disclosed CVE-2026-21589 on Oct. 5, a critical flaw (CVSS 9.3) affecting eight self-hosted Data Center products that lets an unauthenticated attacker read specific files in each product\u2019s web application root. The attacker must already know a file\u2019s exact name and path and cannot list directory contents, The Hacker News reports. https://thehackernews.com/2026/10/critical-atlassian-flaw-lets.html", "url": "https://infosec.exchange/users/edwardk/statuses/117398806855479240"}, {"timestamp": "2026-10-07T09:00:31.572Z", "date_only": false, "value": "2026-10-07T09:00:31.572822Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxblghruw42q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "a79ba280-8a07-493f-b06a-8cd5aa19e23c", "content": "Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products\n\nAtlassian disclosed CVE-2026-21589 on Oct. 5, a critical flaw (CVSS 9.3) affecting eight self-hosted Data Center products ... https://threatintel.cc/2026/10/07/critical-atlassian-flaw-lets-unauthenticated.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxblghruw42q"}, {"timestamp": "2026-10-07T11:08:59.144Z", "date_only": false, "value": "2026-10-07T11:08:59.144146Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxbsm6as7d2v", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "cbbd4cfb-59dd-41d3-9dd2-b5d622d7d5f6", "content": "Atlassian CVE-2026-21589: pre-auth file read in Jira, Confluence, Bitbucket and five more Data Center products. watchTowr's PoC chains it to Crowd admin. Upgrade now, e.g. Confluence 9.2.26 or 10.2.19. https://cti.securitycyber.uk", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxbsm6as7d2v"}, {"timestamp": "2026-10-07T11:38:04Z", "date_only": false, "value": "2026-10-07T11:38:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/3474", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "96b69546-b263-4927-8e8f-6c07921c1db5", "content": "\ud83d\udd34 Atlassian Patches Critical Vulnerability Affecting 8 Products\n\nAtlassian has rolled out patches for a critical-severity vulnerability that impacts all versions of eight of its products.\n\nThe security defect, tracked as CVE-2026-21589 (CVSS score of 9.3), is described as an arbitrary file access issue.\n\nIt can be exploited without authentication to access specific files in the web application root directory.\n\n\u201cExploitation requires prior knowledge of the target file\u2019s exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents. In some configurations, there may be sensitive files present that increase your risk,\u201d Atlassian notes in its advisory.", "url": "https://t.me/pphm_HackerNews/3474"}, {"timestamp": "2026-10-07T12:15:54Z", "date_only": false, "value": "2026-10-07T12:15:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/10262", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "0c1a8bf5-3add-41cc-88d5-9a03405d7005", "content": "\u203c\ufe0f Two hours.\n\nThat\u2019s how quickly exploitation attempts followed public details for Atlassian CVE-2026-21589.\n\nThe flaw lets unauthenticated attackers access specific webroot files when exact paths are known. Fixes are available.\n\nRead - https://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html", "url": "https://t.me/thehackernews/10262", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-07T12:15:54Z", "date_only": false, "value": "2026-10-07T12:15:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/10262", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "1284416a-cbeb-40f4-81ea-e0be10c570b7", "content": "\u203c\ufe0f Two hours.\n\nThat\u2019s how quickly exploitation attempts followed public details for Atlassian CVE-2026-21589.\n\nThe flaw lets unauthenticated attackers access specific webroot files when exact paths are known. Fixes are available.\n\nRead - https://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html", "url": "https://t.me/thehackernews/10262"}, {"timestamp": "2026-10-07T12:20:52.676Z", "date_only": false, "value": "2026-10-07T12:20:52.676961Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117399594744825932", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "9765dd32-f5cd-4fcf-afc1-8079b1cedeae", "content": "Atlassian Data Center flaw draws exploitation attempts within two hours of public details\nAttackers began attempting to exploit the critical Atlassian Data Center flaw (CVE-2026-21589) within two hours of public details emerging, The Hacker News reports. The rapid move from disclosure to exploitation attempts shows how fast the patching window is closing. https://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html", "url": "https://infosec.exchange/users/edwardk/statuses/117399594744825932"}, {"timestamp": "2026-10-07T12:33:07.216Z", "date_only": false, "value": "2026-10-07T12:33:07.216147Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxbxcmf4d62j", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "f279e847-6653-4e56-b355-47c78a57961e", "content": "Threat actors are exploiting CVE-2026-21589 to gain arbitrary file access in multiple Atlassian Data Center products, prompting patches and mitigations.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mxbxcmf4d62j"}, {"timestamp": "2026-10-07T12:33:19.782Z", "date_only": false, "value": "2026-10-07T12:33:19.782400Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxbxcxrrpm2a", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "0a71d622-89fa-4d4d-82fe-2f62be43c7c8", "content": "Threat actors are exploiting CVE-2026-21589 to gain arbitrary file access in multiple Atlassian Data Center products, prompting patches and mitigations.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxbxcxrrpm2a"}, {"timestamp": "2026-10-07T12:33:34.778Z", "date_only": false, "value": "2026-10-07T12:33:34.778950Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxbxdg2yiy2s", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "4ec2bec3-8f80-4dc4-8c28-3a0bee4ff07d", "content": "Threat actors are exploiting CVE-2026-21589 to gain arbitrary file access in multiple Atlassian Data Center products, prompting patches and mitigations.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxbxdg2yiy2s"}, {"timestamp": "2026-10-07T12:37:28.729Z", "date_only": false, "value": "2026-10-07T12:37:28.729375Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxbxkg7bsu2e", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "c94f5697-23d4-4cf4-b1f5-6dd5b30cbc50", "content": "~Certeu~\nUnauthenticated attackers can access known files; patch internet-facing systems urgently.\n-\nIOCs: CVE-2026-21589\n-\n#Atlassian #CVE202621589 #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mxbxkg7bsu2e"}, {"timestamp": "2026-10-07T12:43:57Z", "date_only": false, "value": "2026-10-07T12:43:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_LuVC10xiqdPU9uIK0VcyBRo6Ea4Fw9LvXQf5h7FKNJ3DmI", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "224c2c14-7e40-4e99-b1b4-35c081d9b17c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-07T12:43:57Z", "date_only": false, "value": "2026-10-07T12:43:57.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_LuVC10xiqdPU9uIK0VcyBRo6Ea4Fw9LvXQf5h7FKNJ3DmI", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "5a566130-cae9-4f56-bc67-4bc29b5b9ec4"}, {"timestamp": "2026-10-07T12:49:43.526Z", "date_only": false, "value": "2026-10-07T12:49:43.526722Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mxbyabl4mp2m", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "d607fe0f-8e8a-4a87-bb5d-4f669aff3b64", "content": "A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication.", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3mxbyabl4mp2m"}, {"timestamp": "2026-10-07T13:15:35.733Z", "date_only": false, "value": "2026-10-07T13:15:35.733369Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117399809807735378", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "6a8681a6-e9d8-4241-bb6e-ccd8f9f2ea30", "content": "You Won\u2019t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)#CVE_2026_21589 #Bitbucket #Confluence #Jira #AtlassianBamboo #AtlassianCrowd https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/", "url": "https://infosec.exchange/users/threatcodex/statuses/117399809807735378"}, {"timestamp": "2026-10-07T13:31:15.325Z", "date_only": false, "value": "2026-10-07T13:31:15.325192Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxc2kjjsql2j", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "744c8df9-87df-4228-9844-8d076416c24c", "content": "\ud83e\udd16 CVE-2026-21589 (CVSS 9.3): unauthenticated arbitrary file access in Atlassian Data Center (Bitbucket, Confluence, Jira). Exploitation attempts began within 2h of public PoC details.\nhttps://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxc2kjjsql2j"}, {"timestamp": "2026-10-07T13:33:09.157Z", "date_only": false, "value": "2026-10-07T13:33:09.157860Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rasnedev.bsky.social/post/3mxc2nwnqvp2n", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "2eec5a30-e21b-4444-bd13-1c9a28b5ff18", "content": "Hackers exploit critical Atlassian flaw after public PoC release\n\nHackers exploit CVE-2026-21589 in Jira, Confluence, Bitbucket allowing unauthenticated file access and admin takeover. Patch now.\n\nhttps://rasne.dev/news/hackers-exploit-critical-atlassian-flaw-after-public-poc-release", "url": "https://bsky.app/profile/rasnedev.bsky.social/post/3mxc2nwnqvp2n"}, {"timestamp": "2026-10-07T13:38:16.217Z", "date_only": false, "value": "2026-10-07T13:38:16.217601Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mxc2x2tgys2c", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "54234d02-78e7-4c39-b570-b319cb381ed2", "content": "Atlassian\u2019s CVE-2026-21589 PoC could let attackers take over Jira via Crowd file access. Patch now. #SecurityNews #Atlassian #CVE2026-21589 #Jira #CyberSecurity #Vulnerability https://thedailytechfeed.com/atlassian-poc-exploit-reveals-critical-jira-admin-risk/", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mxc2x2tgys2c"}, {"timestamp": "2026-10-07T13:39:08.126Z", "date_only": false, "value": "2026-10-07T13:39:08.126073Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117399902465945716", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "264fd87e-01c0-45f7-892b-63886a11756b", "content": "An unauthenticated attacker can exploit CVE-2026-21589 to access specific files in the application's web root directory if they know the file's exact name and path. https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/", "url": "https://infosec.exchange/users/jbhall56/statuses/117399902465945716"}, {"timestamp": "2026-10-07T13:39:15.979Z", "date_only": false, "value": "2026-10-07T13:39:15.979406Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mxc2yypp4k2g", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "d11faf84-9a7f-4768-9990-ccf4fc34a1d8", "content": "An unauthenticated attacker can exploit CVE-2026-21589 to access specific files in the application's web root directory if they know the file's exact name and path. www.bleepingcomputer.com/news/securit...", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3mxc2yypp4k2g"}, {"timestamp": "2026-10-07T13:58:01.922Z", "date_only": false, "value": "2026-10-07T13:58:01.922050Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxc42gzfbv2r", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "c6402163-298e-4721-92ec-fb5153ca042a", "content": "\ud83d\udcf0 Atlassian Peringatkan Celah Kritis CVE-2026-21589 di Jira, Confluence, dan Bitbucket\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/07/atlassian-cve-2026-21589-jira-confluence-bitbucket/\n\n#atlassian #cybersecurity #keamananSiber #server #vulnerability", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxc42gzfbv2r"}, {"timestamp": "2026-10-07T14:09:37Z", "date_only": false, "value": "2026-10-07T14:09:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3508", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "582a7d2c-5bc6-41c6-9b37-013bbba48fad", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Atlassian Data Center \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u0430\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\nBDU:2026-16016\nCVE-2026-21589\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://jira.atlassian.com/browse/BAM-26567\nhttps://jira.atlassian.com/browse/BSERV-20604\nhttps://jira.atlassian.com/browse/CONFSERVER-104488\nhttps://jira.atlassian.com/browse/CRUC-8741\nhttps://jira.atlassian.com/browse/CWD-6610\nhttps://jira.atlassian.com/browse/FE-7583\nhttps://jira.atlassian.com/browse/JRASERVER-79546\nhttps://jira.atlassian.com/browse/JSDSERVER-16809", "url": "https://t.me/bdufstecru/3508"}, {"timestamp": "2026-10-07T14:14:24.459Z", "date_only": false, "value": "2026-10-07T14:14:24.459106Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threathuntergirl.bsky.social/post/3mxc4xotxfc2y", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "5021ba70-2a29-4c79-8b4d-cdb18ce1bfdd", "content": "CVE-2026-21589", "url": "https://bsky.app/profile/threathuntergirl.bsky.social/post/3mxc4xotxfc2y"}, {"timestamp": "2026-10-07T14:16:52.626Z", "date_only": false, "value": "2026-10-07T14:16:52.626662Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mxc545vuqq2c", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "33dd2244-43de-4af9-aeed-a3365e01db02", "content": "Hackers are exploiting CVE-2026-21589, a critical unauthenticated flaw in Atlassian Jira, Confluence, and Bitbucket, after a public proof-of-concept appeared.", "url": "https://bsky.app/profile/thecircuitry.to/post/3mxc545vuqq2c"}, {"timestamp": "2026-10-07T14:40:41.013Z", "date_only": false, "value": "2026-10-07T14:40:41.013580Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxc6gpf7tc24", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "04343a7a-ad04-4bb1-ab33-d8a010b15230", "content": "Atlassian warns of critical file-access flaw in Jira, Confluence\n\nAtlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bi\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxc6gpf7tc24"}, {"timestamp": "2026-10-07T14:44:37Z", "date_only": false, "value": "2026-10-07T14:44:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/-nVrY5kUqdTgI7gTW7DsULhdXrYMCnvEF3e8bb-5OlE-hg", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "1c2e3c18-ff35-4e51-975f-9050e916aed6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-07T14:44:37Z", "date_only": false, "value": "2026-10-07T14:44:37.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-nVrY5kUqdTgI7gTW7DsULhdXrYMCnvEF3e8bb-5OlE-hg", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "e056eff2-25e3-4291-becf-0ea7caeff499"}, {"timestamp": "2026-10-07T14:59:54.457Z", "date_only": false, "value": "2026-10-07T14:59:54.457439Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mxc7j3eu3q2n", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "395c070a-f524-410e-9d81-71ccdcf26baa", "content": "Atlassian datacenter products get critical file flaw\n\nAtlassian warned users about CVE-2026-21589, a critical arbitrary file access flaw in its datacenter products, requiring immediate patching or offline removal.", "url": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mxc7j3eu3q2n"}, {"timestamp": "2026-10-07T15:00:21Z", "date_only": false, "value": "2026-10-07T15:00:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ha_7mFLs72bky24NH-FzF2PgdUv_pLzhllIHa7B8Pc6U_Iw", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "9ac455d5-ed40-4f2a-a9e0-1dd2c16ed594", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-07T15:00:21Z", "date_only": false, "value": "2026-10-07T15:00:21.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ha_7mFLs72bky24NH-FzF2PgdUv_pLzhllIHa7B8Pc6U_Iw", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "6e545401-0df9-4d68-ab55-57764075cf99"}, {"timestamp": "2026-10-07T15:00:52.968Z", "date_only": false, "value": "2026-10-07T15:00:52.968526Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bufigol.bsky.social/post/3mxc7kov2l725", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "cd9f3fab-ce86-4d73-a020-8c1d259106d3", "content": "CVE-2026-21589: CVSS 9.3, unauthenticated file reads in 8 Data Center products. \"Must know the exact path\" is thin comfort: anyone can install a trial and map it. Patch, then check your logs. #infosec #Atlassian www.helpnetsecurity.com/2026/10/06/a...", "url": "https://bsky.app/profile/bufigol.bsky.social/post/3mxc7kov2l725"}, {"timestamp": "2026-10-07T15:02:01.593Z", "date_only": false, "value": "2026-10-07T15:02:01.593799Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3mxc7mv7sji22", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "6a93c85e-4b81-4250-8ec0-10ac5f127224", "content": "Scans for Atlassian vulnerablity (CVE-2026-21589) https://isc.sans.edu/diary/33406", "url": "https://bsky.app/profile/sansisc.bsky.social/post/3mxc7mv7sji22"}, {"timestamp": "2026-10-07T15:09:17Z", "date_only": false, "value": "2026-10-07T15:09:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/258040", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "649bc53e-a88e-46bc-aa2c-e4f1e8b9a0ef", "content": "Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)\nhttps://ift.tt/yNoWlvV", "url": "https://t.me/ctinow/258040"}, {"timestamp": "2026-10-07T16:01:45.484Z", "date_only": false, "value": "2026-10-07T16:01:45.484096Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxccxp3fzf2o", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "d5418fd7-cb80-456f-a8f7-5f5d3664b06e", "content": "~Cybergcca~\nSeven advisories issued; Atlassian CVE-2026-21589 is actively exploited.\n-\nIOCs: CVE-2026-21589, CVE-2026-59346, CVE-2026-59347\n-\n#CVE #CyberSecurity #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mxccxp3fzf2o"}, {"timestamp": "2026-10-07T16:34:05.298Z", "date_only": false, "value": "2026-10-07T16:34:05.298706Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mxcerhha722q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "18866f89-7a3c-450c-87da-ba98c8a10d13", "content": "Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)\n\nisc.sans.edu/diary/rss/33...\n\n#Cybersecurity #LargeScaleImpact #Vulnerability", "url": "https://bsky.app/profile/hapsis.bsky.social/post/3mxcerhha722q"}, {"timestamp": "2026-10-07T16:38:57.611Z", "date_only": false, "value": "2026-10-07T16:38:57.611932Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mxcf25sqac2p", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "a5282255-f55b-4138-8c73-bf36530f8811", "content": "Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)\n\nwww.helpnetsecurity.com/2026/10/07/e...\n\n#Kyberturvallisuus #LaajaVaikutus #Haavoittuvuus", "url": "https://bsky.app/profile/hapsis.bsky.social/post/3mxcf25sqac2p"}, {"timestamp": "2026-10-07T16:50:53.719Z", "date_only": false, "value": "2026-10-07T16:50:53.719266Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117400656310310034", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "8d88e6d2-da17-4c4c-ab0b-576d8b8413d7", "content": "Scans for Atlassian vulnerablity (CVE-2026-21589)#CVE_2026_21589 https://isc.sans.edu/diary/rss/33406", "url": "https://infosec.exchange/users/threatcodex/statuses/117400656310310034"}, {"timestamp": "2026-10-07T17:05:07Z", "date_only": false, "value": "2026-10-07T17:05:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8689", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "8596ad45-0049-48ef-a4d1-15ad0982df34", "content": "\u041f\u043e \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n1. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2026-21589, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Atlassian, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Jira, Confluence \u0438 Bitbucket, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Previdian \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u044d\u0442\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0435\u0442\u0438-\u043b\u043e\u0432\u0443\u0448\u043a\u0435, \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0442\u0447\u0435\u0442\u0430. \u041f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441 \u0442\u0440\u0435\u0445 IP: 38.60.157[.]86, 146.70.187[.]234 \u0438 159.26.119[.]225.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-21589 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0435\u0441\u043b\u0438 \u0435\u043c\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0442\u043e\u0447\u043d\u043e\u0435 \u0438\u043c\u044f \u0438 \u043f\u0443\u0442\u044c \u043a \u0444\u0430\u0439\u043b\u0443.\n\n\u0412 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a Atlassian \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0421\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0435\u0442 \u0441 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a CVE-2026-21589 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043a Jira, Confluence \u0438 Bitbucket \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441 Crowd.\n\n\u0411\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f - \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Atlassian, \u0430 watchTowr \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0437\u044f\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430 \u0434\u043b\u044f CVE-2026-21589.\n\n2. SonicWall \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f SSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0440\u0438\u0441\u043a\u0430 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 SMA1000.\n\nCVE-2026-102255 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Appliance WorkPlace \u043c\u043e\u0434\u0435\u043b\u0435\u0439 SMA1000 6210, 7210 \u0438 8200v, \u043d\u043e \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 SMA 100 Series \u0438\u043b\u0438 SSL-VPN, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 SonicWall.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u043f\u0443\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n3. Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Android, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 25 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Framework \u0438 System, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u043c\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 System, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0430\u0432 \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0412 Framework \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0430 \u043f\u044f\u0442\u044c - \u043a EoP. \u0412 System \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a EoP, \u043f\u044f\u0442\u044c DoS, \u043e\u0434\u043d\u0430 RCE \u0438 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n4. \u041a\u0430\u043a \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u0430\u044f \u0442\u0430\u0431\u043b\u0438\u0446\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0432 LibreOffice \u0438 Apache OpenOffice.\n\n\u0410\u0442\u0430\u043a\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435 Java \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435.\n\n\u041f\u043e\u043a\u0430 \u0447\u0442\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043b\u0438\u0448\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 PoC, \u0438 \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0412 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043e\u0442 5 \u043e\u043a\u0442\u044f\u0431\u0440\u044f LibreOffice \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 CVE-2026-63277, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044e 26.2.5 \u0438\u043b\u0438 26.8.0. \u0411\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b. \n\n\u0412 Apache OpenOffice \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-59265. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e \u0442\u0435\u043a\u0443\u0449\u0435\u0439, 4.1.16, \u0438, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 4.1.17, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n5. \u0415\u0449\u0435 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Chrome 155 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c 247 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0447\u0435\u0442\u044b\u0440\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u041e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Chromecast, Browser, Navigation \u0438 Track \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-106382, CVE-2026-106197, CVE-2026-106358 \u0438 CVE-2026-106347.\n\n6. Microsoft \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Exchange Server \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e CVE-2026-96940 (CVSS 8,8).\n\n\u041e\u043d\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0441\u043b\u0430\u0431\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u043d\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c Exchange. IT-\u0433\u0438\u0433\u0430\u043d\u0442 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u00ab\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0431\u043e\u043b\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0439\u00bb.", "url": "https://t.me/true_secator/8689"}, {"timestamp": "2026-10-07T17:40:04.537Z", "date_only": false, "value": "2026-10-07T17:40:04.537431Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcihip23j2w", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "f4738553-0533-456a-8a0f-c3f967efc64d", "content": "CVE-2026-21589 - bamboo data center\nAn unauthenticated user can request certain files inside the web\u2011application folder of the listed Atlassian products if they already know the exact file name and path. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#atlassian #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcihip23j2w"}, {"timestamp": "2026-10-07T18:00:34.170Z", "date_only": false, "value": "2026-10-07T18:00:34.170137Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mxcjm5pjhh2o", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "8df57cd9-808a-4f76-8510-f7f2b9ea2626", "content": "Overview On October 5, 2026, Atlassian published a security advisory for CVE-2026-21589 , a critical arbitrary file access vulnerability affecting eight products: Bitb...\n\n\ud83d\udd17 https://www.rapid7.com/blog/post/etr-cve-2026-21589-critical-unauthenticated-arbitrary-file-access-in-atlassian-products", "url": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mxcjm5pjhh2o"}, {"timestamp": "2026-10-07T19:00:47.919Z", "date_only": false, "value": "2026-10-07T19:00:47.919503Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxhfeh22q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "c18f1a31-cf50-43ca-ad56-57e830c4efa5", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxhfeh22q"}, {"timestamp": "2026-10-07T19:00:48.370Z", "date_only": false, "value": "2026-10-07T19:00:48.370091Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs2x4c2q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "ac53c452-b942-459c-80f9-b5e3dec11225", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs2x4c2q"}, {"timestamp": "2026-10-07T19:00:48.821Z", "date_only": false, "value": "2026-10-07T19:00:48.821055Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs2y3k2q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "621998af-2775-466c-9920-c1d36feaac3a", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs2y3k2q"}, {"timestamp": "2026-10-07T19:00:49.279Z", "date_only": false, "value": "2026-10-07T19:00:49.279686Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs2z2s2q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "9ead932a-4ea6-4491-b828-2837ff14ba11", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs2z2s2q"}, {"timestamp": "2026-10-07T19:00:49.750Z", "date_only": false, "value": "2026-10-07T19:00:49.750945Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs33yk2q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "1e3aeb88-6ba7-4941-8b71-ffc075747ef0", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs33yk2q"}, {"timestamp": "2026-10-07T19:00:50.378Z", "date_only": false, "value": "2026-10-07T19:00:50.378659Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs34xs2q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "d6758499-1c0c-4815-838c-eb5319d09f22", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs34xs2q"}, {"timestamp": "2026-10-07T19:00:50.805Z", "date_only": false, "value": "2026-10-07T19:00:50.805863Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs34xt2q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "f00673a0-88dc-4389-84ba-407f0b96a5c2", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs34xt2q"}, {"timestamp": "2026-10-07T19:00:51.235Z", "date_only": false, "value": "2026-10-07T19:00:51.235887Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs34xu2q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "0712e895-e802-4aaa-9b79-fbaa8076821f", "content": "7/ \ud83d\udee0\ufe0f Patch list: Atlassian CVE-2026-21589 (Data Center, no exploitation evidence yet) and LibreOffice/OpenOffice flaws (per Una al D\u00eda). Never type codes on pages reached via links.", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mxcmxs34xu2q"}, {"timestamp": "2026-10-07T19:09:54.814Z", "date_only": false, "value": "2026-10-07T19:09:54.814139Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxcni5l7572q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "e14e6b2c-f08e-4ca6-b14c-2e77a4c33aef", "content": "Atlassian\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-21589\uff09\u3001\u65e9\u304f\u3082\u60aa\u7528\u306e\u8a66\u307f\u3092\u78ba\u8a8d\n\nAtlassian\u306f\u3001\u81ea\u793e\u7ba1\u7406\u578b\u306eDataAlly\u88fd\u54c1\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u306e\u8106\u5f31\u6027\uff08CVE-2026-21589\uff09\u3092\u4fee\u6b63\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002\u305d\u306e1\u65e5\u5f8c\u3001watchTowr\u306e\u7814\u7a76\u8005\u304c\u8106\u5f31\u6027\u306e\u6280\u8853\u7684\u306a\u89e3\u8aac\u3092\u516c\u958b\u3057\u3066\u304b\u3089\u6570\u6642\u9593\u5f8c\u306b\u306f\u3001\u653b\u6483\u8005\u304c\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3088\u3046\u3068\u3059\u308b\u52d5\u304d\u304c\u78ba\u8a8d\u3055\u308c\u3066", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxcni5l7572q"}, {"timestamp": "2026-10-07T19:42:01Z", "date_only": false, "value": "2026-10-07T19:42:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/3282", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "05133caf-88ea-41b5-ac9b-e97f30217954", "content": "A critical Atlassian vulnerability rated CVSS 9.3 affects 8 Data Center products.\n\nCVE-2026-21589 can let unauthenticated attackers read specific files if they know the exact file path. Internet-facing instances should be upgraded or restricted.", "url": "https://t.me/CyberDispatch/3282"}, {"timestamp": "2026-10-07T20:01:56.738Z", "date_only": false, "value": "2026-10-07T20:01:56.738184Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxcqf6s6ib2e", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "24e86ecd-c12b-4f59-b201-fcbfbb5c156c", "content": "~Akamai~\nUnauthenticated path traversal lets attackers read files and credentials; patch self-hosted products immediately.\n-\nIOCs: CVE-2026-21589, 3000990 v1\n-\n#Atlassian #CVE202621589 #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mxcqf6s6ib2e"}, {"timestamp": "2026-10-07T20:06:18.203Z", "date_only": false, "value": "2026-10-07T20:06:18.203732Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mxcqmxewlz2m", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "1376cdcc-deef-4af5-bddf-35e54218301e", "content": "\ud83d\udea8 Rapid Response: CVE-2026-21589 is a critical arbitrary file access vulnerability affecting eight Atlassian Data Center products.\n\nCensys detects 95,366 Internet facing hosts and 431,502 web properties running affected products. \n\nDetails: https://bit.ly/4dWwYgs ", "url": "https://bsky.app/profile/censys.bsky.social/post/3mxcqmxewlz2m"}, {"timestamp": "2026-10-07T21:00:04Z", "date_only": false, "value": "2026-10-07T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XsCqwcFszPjQSwpV59IqFI9CcBBRxT2RNGxlhfy_aazsC9w", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "2a3f38a2-cc7a-465b-95cc-2fbcf520efd6", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-07T21:00:04Z", "date_only": false, "value": "2026-10-07T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/XsCqwcFszPjQSwpV59IqFI9CcBBRxT2RNGxlhfy_aazsC9w", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "cd73ea95-3f92-4fca-9bac-61645cf58275"}, {"timestamp": "2026-10-07T22:00:27.156Z", "date_only": false, "value": "2026-10-07T22:00:27.156945Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ca794994-53b1-4f27-8263-ee62a3eb8e2c", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "7150a13a-9825-489c-bd9e-157baecc187a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ca794994-53b1-4f27-8263-ee62a3eb8e2c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-07T22:00:27.674Z", "date_only": false, "value": "2026-10-07T22:00:27.674069Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mxcwz4dncn2w", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "89e6e23c-9be0-4d8e-9c05-630af9637dc3", "content": "\ud83d\udce2 CVE-2026-21589 : Lecture de fichiers arbitraire pr\u00e9-auth sur Atlassian Jira, Confluence et plus\n\nCet article pr\u00e9sente une analyse technique approfondie de CVE-2026-21589, une vuln\u00e9rabilit\u00e9 critique divulgu\u00e9e par Atlassian dans\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#Atlassian #Confluence #Cyberveille", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mxcwz4dncn2w"}, {"timestamp": "2026-10-07T23:00:38Z", "date_only": false, "value": "2026-10-07T23:00:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/44801", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "b69d7c5f-9a10-49e4-b818-cd5e2b23e683", "content": "Hackers exploit critical Atlassian flaw after public PoC release\n\nA critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. [...]\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/", "url": "https://t.me/VulnerabilityNews/44801", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-07T23:11:03.946Z", "date_only": false, "value": "2026-10-07T23:11:03.946192Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxd2xclpvs22", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "57ed7bfc-c3e6-4687-bcee-ba2c8e142fdd", "content": "Atlassian\u3001Jira\u3084Confluence\u306a\u3069\u306bCVSS 9.3\u306e\u8106\u5f31\u6027\u300cCVE-2026-21589\u300d\u2015\u8a8d\u8a3c\u306a\u3057\u3067\u7279\u5b9a\u30d5\u30a1\u30a4\u30eb\u3078\u30a2\u30af\u30bb\u30b9\u53ef\u80fd \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxd2xclpvs22"}, {"timestamp": "2026-10-07T23:12:06.039Z", "date_only": false, "value": "2026-10-07T23:12:06.039379Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mxd2z3sn7h2z", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "7900c287-7d20-4f9a-b73d-b36c860970e8", "content": "You Won\u2019t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) labs.watchtowr.com/you-wont-hea...", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mxd2z3sn7h2z"}, {"timestamp": "2026-10-08T01:11:03.791Z", "date_only": false, "value": "2026-10-08T01:11:03.791800Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdbnwiwuh2q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "41b60d96-8b79-4f91-89d2-7e648fa60ae4", "content": "Atlassian\u30018\u88fd\u54c1\u306b\u5f71\u97ff\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nAtlassian\u306f\u3001\u540c\u793e\u306e8\u88fd\u54c1\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u5f71\u97ff\u3059\u308b\u3001\u6df1\u523b\u5ea6\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-21589\u300d\uff08CVSS\u30b9\u30b3\u30a29.3\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u304a\u308a\u3001\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u554f\u984c\u3068\u8aac\u660e\u3055\u308c\u3066\u3044\u307e\u3059\u3002 \u8a8d\u8a3c\u306a\u3057\u3067\u60aa\u7528\u3067\u304d\u3001Web\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30eb\u30fc\u30c8", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdbnwiwuh2q"}, {"timestamp": "2026-10-08T01:29:59.984Z", "date_only": false, "value": "2026-10-08T01:29:59.984599Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdcps2rew2f", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "6ca2238a-7fb0-42b6-a861-1200d9bb745d", "content": "Jira\u7ba1\u7406\u8005\u6a29\u9650\u306e\u596a\u53d6\u306b\u3064\u306a\u304c\u308b Atlassian \u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001PoC\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u304c\u516c\u958b\n\n\u30bb\u30eb\u30d5\u30db\u30b9\u30c8\u578b\u306e Atlassian \u88fd\u54c18\u7a2e\u306b\u5f71\u97ff\u3059\u308b\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cCVE-2026-21589\u300d\u306b\u3064\u3044\u3066\u3001PoC\uff08\u6982\u5ff5\u5b9f\u8a3c\uff09\u306e\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u30c1\u30a7\u30fc\u30f3\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002 \u7814\u7a76\u7d50\u679c\u306b\u3088\u308b\u3068\u3001Atlassian Crowd \u3068\u9023\u643a\u3057\u305f\u74b0\u5883\u3067\u306f\u3001\u653b\u6483\u8005\u304c\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u5e73\u6587\u3067\u76d7\u307f\u51fa\u3057\u3001\u305d", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdcps2rew2f"}, {"timestamp": "2026-10-08T01:30:42.543Z", "date_only": false, "value": "2026-10-08T01:30:42.543151Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdcr2ubxy2n", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "d847ebaf-a482-4bd5-a53f-e5d0f26b823a", "content": "\u516c\u958bPoC\u306e\u767b\u5834\u3092\u53d7\u3051\u3001Atlassian\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u72d9\u3046\u653b\u6483\u304c\u767a\u751f\n\nJira\u3001Confluence\u3001Bitbucket\u306a\u3069\u3001Atlassian\u306e\u8907\u6570\u306e\u88fd\u54c1\u30d5\u30a1\u30df\u30ea\u30fc\u306b\u5f71\u97ff\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cCVE-2026-21589\u300d\u3092\u60aa\u7528\u3057\u305f\u653b\u6483\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u653b\u6483\u306b\u8a8d\u8a3c\u306f\u5fc5\u8981\u3042\u308a\u307e\u305b\u3093\u3002 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696d\u306ePrevidian\u306f\u672c\u65e5\u3001\u81ea\u793e\u306e\u30cf\u30cb\u30fc\u30dd\u30c3\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3067\u3053\u306e\u653b\u6483\u6d3b\u52d5\u3092\u691c\u77e5\u3057\u307e\u3057", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdcr2ubxy2n"}, {"timestamp": "2026-10-08T03:00:05Z", "date_only": false, "value": "2026-10-08T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rKD7aTXmU8rmpJnqvlRqgqPKMURUCH8RvOSayxu8507-eEM", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "7bf61575-8829-415f-a352-dc5e6dd85795", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-08T03:26:21.768Z", "date_only": false, "value": "2026-10-08T03:26:21.768248Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mxdj7ubtws2q", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "ba39ebd9-34b4-497c-a665-34c66d971d6e", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-21589) Atlassian Data Center Arbitrary File Access via Path Traversal\" and \"Emerging Threat: (CVE-2026-94483) Next.js Server-Side Request Forgery via Image Optimization\".\n \n#cybersecurity #EASM https://opsmtrs.com/44Srq0X", "url": "https://bsky.app/profile/opsmatters.com/post/3mxdj7ubtws2q"}, {"timestamp": "2026-10-08T05:57:07.953Z", "date_only": false, "value": "2026-10-08T05:57:07.953108Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mxdrnhng352n", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "93a4c189-a260-4b24-9f3c-9264408980a1", "content": "Atlassian CVE-2026-21589 exploit\u00e9e <2h apr\u00e8s le PoC.\nExchange Server CVE-2026-96940 (CVSS 8,8) : patch hors bande.\nCERT-FR : vague d'avis (OpenSSH, Veeam, SonicWall\u2026).\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1271/", "url": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mxdrnhng352n"}, {"timestamp": "2026-10-08T06:08:15Z", "date_only": false, "value": "2026-10-08T06:08:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/104629", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "0b2b3b01-7239-4359-9070-57aa0a6d2a21", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Confluence #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-21589\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rxsklife\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-08 05:43:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-21589 is a critical (CVSS 9.3) arbitrary file access vulnerability affecting all versions of eight Atlassian Data Center products, including Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible, Fisheye, and Jira Service Management.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104629"}, {"timestamp": "2026-10-08T06:32:44.961Z", "date_only": false, "value": "2026-10-08T06:32:44.961787Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/secpoint.bsky.social/post/3mxdtmky7u224", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "02f49620-be5e-4625-afad-6158b1bd976e", "content": "Critical Atlassian Data Center vulnerability CVE-2026-21589\n\nSecPoint Penetrator Contact information\nwww.secpoint.com/contact-me.h...\n\nSecPoint Penetrator Partner Sign Up\nwww.secpoint.com/partner-sign...\n\n#Atlassian #CyberSecurity #VulnerabilityManagement #SecPoint #Penetrator", "url": "https://bsky.app/profile/secpoint.bsky.social/post/3mxdtmky7u224"}, {"timestamp": "2026-10-08T07:00:15Z", "date_only": false, "value": "2026-10-08T07:00:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AbJ1vYqrehn5P_8YxNPSjGP6OU6aEN_2T8e0pXZvPhd7xF0", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "c1a9302d-7d39-4077-91eb-7f3637aaa31d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-08T07:00:37.579Z", "date_only": false, "value": "2026-10-08T07:00:37.579317Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mxdv6yxns725", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "811adf56-d547-4fcd-8f49-7fb8fb559230", "content": "\ud83d\udce2 [VULN] Atlassian : une faille critique permet de lire des fichiers sur Jira, Confluence et Bitbucket - CVE-2026-21589\n\nVous administrez une instance Jira, Confluence ou Bitbucket h\u00e9berg\u00e9e sur vos propres serveurs ?\n\n#Vuln\u00e9rabilit\u00e9 #CVE #Cyberveille", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mxdv6yxns725"}, {"timestamp": "2026-10-08T07:10:07.955Z", "date_only": false, "value": "2026-10-08T07:10:07.955149Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mxdvpymtlk2s", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "f3718741-8dbb-4593-ac2e-b23bb367e553", "content": "Atlassian Data Center\u306e\u8106\u5f31\u6027\u3001\u8a73\u7d30\u516c\u958b\u304b\u30892\u6642\u9593\u4ee5\u5185\u306b\u60aa\u7528\u306e\u8a66\u307f\u3092\u78ba\u8a8d\uff08CVE-2026-21589\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/48034/", "url": "https://bsky.app/profile/shiojiri.com/post/3mxdvpymtlk2s"}, {"timestamp": "2026-10-08T07:26:45.905Z", "date_only": false, "value": "2026-10-08T07:26:45.905448Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dastechno.com/post/3mxdwnpyaud2c", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "3532700f-559d-4eae-8d54-1b7187b58aa5", "content": "Atlassian-L\u00fccke CVE-2026-21589: Angriffe auf Jira und Confluence\n\nKritische L\u00fccke in Atlassian Data Center (CVSS 9.3): Jira, Confluence, Bitbucket und Crowd werden bereits angegriffen. Welche Versionen sch\u00fctzen und was Admins jetzt tun sollten.\n\n#News", "url": "https://bsky.app/profile/dastechno.com/post/3mxdwnpyaud2c"}, {"timestamp": "2026-10-08T07:56:38.666Z", "date_only": false, "value": "2026-10-08T07:56:38.666071Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxdyd67z372i", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "4e5b384d-44a8-42ce-83c8-2e5632b6b8e8", "content": "\ud83d\udcf0 Hacker Mulai Eksploitasi Celah Kritis Atlassian CVE-2026-21589 setelah PoC Dipublikasikan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/08/atlassian-cve-2026-21589-jira-confluence-bitbucket-exploit/\n\n#cybersecurity #keamananSiber #vulnerability #zero-day", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxdyd67z372i"}, {"timestamp": "2026-10-08T07:57:25.959Z", "date_only": false, "value": "2026-10-08T07:57:25.959200Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxdyelfq5v2v", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "2550b1bc-a0c1-4ece-a1f7-b45714ff77d6", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 66 interactions\nCVE-2026-88779: 47 interactions\nCVE-2026-104286: 39 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-21589: 37 interactions\nCVE-2026-107194: 12 interactions\nCVE-2026-88779: 8 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxdyelfq5v2v"}, {"timestamp": "2026-10-08T08:00:13.461Z", "date_only": false, "value": "2026-10-08T08:00:13.461234Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mxdyjkqixh2o", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "22e7eca7-1606-4a17-9eca-e812790b17ba", "content": "Atlassian CVE-2026-21589 (CVSS 9.3): unauthenticated file read in 8 Data Center products incl. Jira, Confluence, Bitbucket, Crowd. No exploitation reported yet. Upgrade, restrict access, check logs.\n\ud83c\uddec\ud83c\udde7 diesec.com/2026/10/atla...\n\ud83c\udde9\ud83c\uddea diesec.com/de/2026/10/a... \n#cybersecurity", "url": "https://bsky.app/profile/diesec.bsky.social/post/3mxdyjkqixh2o"}, {"timestamp": "2026-10-08T08:07:34.780Z", "date_only": false, "value": "2026-10-08T08:07:34.780967Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sinaowolabi76b.bsky.social/post/3mxdywq2j3t2e", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "db7a4330-3da4-44c3-a237-2cd1018db5b0", "content": "Self-hosting means the patch clock is yours. CVE-2026-21589 allows unauthenticated file access in Atlassian Data Center products, and cloud customers were patched automatically while self-hosted admins must apply the updates themselves.", "url": "https://bsky.app/profile/sinaowolabi76b.bsky.social/post/3mxdywq2j3t2e"}, {"timestamp": "2026-10-08T08:11:10.412Z", "date_only": false, "value": "2026-10-08T08:11:10.412518Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/billingsley.bsky.social/post/3mxdz52p7dn22", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "841108fb-0e5a-4e7a-af3b-57f8dfd1e452", "content": "COGNOSCERE Tech Brief \u2014 2026-10-08\n\nAtlassian disclosed CVE-2026-21589, a CVSS 9.3 arbitrary file-read vulnerability\n\nhttps://youtube.com/watch?v=jV1z_n55NXo\n\nhttps://www.cognoscerellc.com/news", "url": "https://bsky.app/profile/billingsley.bsky.social/post/3mxdz52p7dn22"}, {"timestamp": "2026-10-08T08:13:00Z", "date_only": false, "value": "2026-10-08T08:13:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/25742", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "0468c2bd-2a92-4966-8916-c1f083947a3b", "content": "\u200aHackers exploit critical Atlassian flaw after public PoC release\n\nA critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/", "url": "https://t.me/BleepingComputer/25742", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-08T08:13:00Z", "date_only": false, "value": "2026-10-08T08:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BleepingComputer/25742", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "92cb2507-c750-4794-ac96-76f32306d8bc", "content": "\u200aHackers exploit critical Atlassian flaw after public PoC release\n\nA critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/", "url": "https://t.me/BleepingComputer/25742"}, {"timestamp": "2026-10-08T08:15:28.608Z", "date_only": false, "value": "2026-10-08T08:15:28.608985Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxdzeqfgm2z2", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "a6c84c97-906b-49bf-a307-c949e991d660", "content": "Threat actors are exploiting CVE-2026-21589, a critical Atlassian flaw that can expose sensitive files across multiple Data Center products. Threat actors have started exploiting CVE-2026-21589 (CVSS score of 9.3), a critical arbitrary file access flaw in Atlassian Data Center products. The [\u2026]", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxdzeqfgm2z2"}, {"timestamp": "2026-10-08T08:15:32.718Z", "date_only": false, "value": "2026-10-08T08:15:32.718293Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-949430a4-087921198d66a9a6", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "e1821dc4-f6c6-48f4-8a9d-8cbc20a2ccd5", "content": "Threat actors are exploiting CVE-2026-21589, a critical Atlassian flaw that can expose sensitive files across multiple Data Center products. Threat actors have started exploiting CVE-2026-21589 (CVSS score of 9.3), a critical arbitrary file access flaw in Atlassian Data Center products. The vulnerability could allow attackers to access sensitive files under certain conditions. Affected products include [\u2026]Atlassian Vulnerability Comes Under Attack Hours After Details Go Public", "url": "https://poliverso.org/objects/0477a01e-949430a4-087921198d66a9a6"}, {"timestamp": "2026-10-08T08:22:44.124Z", "date_only": false, "value": "2026-10-08T08:22:44.124028Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxdzrstnnk24", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "7db64f05-c479-4be8-b3c8-2528777c4463", "content": "Hackers exploit critical Atlassian flaw after public PoC release\n\nA critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. [...]\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxdzrstnnk24"}, {"timestamp": "2026-10-08T08:40:27.491Z", "date_only": false, "value": "2026-10-08T08:40:27.491675Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxe2riphsc2o", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "c816409b-c43a-4be3-bad3-65dc86d91751", "content": "Atlassian Data Center CVE-2026-21589 (CVSS 9.3): file read pre-auth via path traversal ('::' \u2192 '/'), sfruttato ~2h dopo la PoC watchTowr. Colpiti Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible, Fisheye. #infosec", "url": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxe2riphsc2o"}, {"timestamp": "2026-10-08T08:40:27.945Z", "date_only": false, "value": "2026-10-08T08:40:27.945826Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxe2ripzes2o", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "8f2a1fe9-badf-4942-9f70-a3305161601e", "content": "Atlassian Data Center CVE-2026-21589 (CVSS 9.3): file read pre-auth via path traversal ('::' \u2192 '/'), sfruttato ~2h dopo la PoC watchTowr. Colpiti Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible, Fisheye. #infosec", "url": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxe2ripzes2o"}, {"timestamp": "2026-10-08T09:02:54Z", "date_only": false, "value": "2026-10-08T09:02:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104645", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "71d967a9-f0d8-4daa-a461-ba9f8af485e2", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-21589\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-08 09:00:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-21589 \u2014 Atlassian DC pre-auth arbitrary file read (CVSS 4.0 9.3). PoCbit PoC: atlassian-plugins-webresource ..:: traversal on /download/resources/ for Jira, Confluence, Bitbucket. check + exploit (WEB-INF/web.xml, crowd.properties). Batch JSONL, hits.txt. Not RCE. https://pocbit.org/pocs/cve-2026-21589\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104645", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-08T09:02:54Z", "date_only": false, "value": "2026-10-08T09:02:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/104645", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "92027c9d-3e98-46db-bcd3-f24b01cc024b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-21589\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-08 09:00:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-21589 \u2014 Atlassian DC pre-auth arbitrary file read (CVSS 4.0 9.3). PoCbit PoC: atlassian-plugins-webresource ..:: traversal on /download/resources/ for Jira, Confluence, Bitbucket. check + exploit (WEB-INF/web.xml, crowd.properties). Batch JSONL, hits.txt. Not RCE. https://pocbit.org/pocs/cve-2026-21589\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104645"}, {"timestamp": "2026-10-08T10:16:49.638Z", "date_only": false, "value": "2026-10-08T10:16:49.638384Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxea5ss2hz2i", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "ae003db6-c06a-4c62-93bf-f7d35525913c", "content": "\u8907\u6570\u306eAtlassian\u88fd\u54c1\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u5b9f\u74b0\u5883\u3067\u60aa\u7528\u3055\u308c\u308b\n\nAtlassian Data Center\u88fd\u54c1\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u3001\u5b9f\u74b0\u5883\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u5831\u3058\u3089\u308c\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-21589\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u307e\u3059\u3002Atlassian\u306f10\u67085\u65e5\u4ed8\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3067\u3001\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u306b\u30a2\u30af\u30bb\u30b9\u3055\u308c\u308b\u8106\u5f31\u6027\u3068\u8aac\u660e\u3057\u307e\u3057\u305f\u3002\u6df1\u523b\u5ea6\u3092\u793a\u3059C", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxea5ss2hz2i"}, {"timestamp": "2026-10-08T11:00:15Z", "date_only": false, "value": "2026-10-08T11:00:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/PY_67xmTxm2Q2F6MmOUk4JQ3gShJ_02sRM1bZXhQVJeEw20", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "84233b24-08ce-4a91-af83-d29e8369ed5e", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-08T12:30:25.496Z", "date_only": false, "value": "2026-10-08T12:30:25.496227Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxehmp7aoc24", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "f38224d0-7c67-4fa4-b0fb-405e5bc658aa", "content": "Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)\n\nOne day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products, and a few hours after watchTowr researchers \u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxehmp7aoc24"}, {"timestamp": "2026-10-08T12:40:41.743Z", "date_only": false, "value": "2026-10-08T12:40:41.743557Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxei733mrc24", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "4caec4b8-9629-4825-8e61-b18251437af3", "content": "Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)\n\nOn October 5th, Atlassian published patches&#;x26;#;xc2;&#;x26;#;xa0;for multiple products to fix an \"Arbitrary File Access\" vulnerability &#;x26;#;x5b;CVE-2026-21589&#;x26;#;x5d;. An attacker can read arbitrary fi\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxei733mrc24"}, {"timestamp": "2026-10-08T14:08:25.426Z", "date_only": false, "value": "2026-10-08T14:08:25.426133Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yetikamp.bsky.social/post/3mxen3xqmdw2p", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "ff214e43-c063-4bdd-9f06-9391904b4941", "content": "CVE-2026-21589 in Atlassian products allows arbitrary code execution. If you cannot verify immediate vendor remediation, isolate affected instances and monitor for anomalous outbound connections.", "url": "https://bsky.app/profile/yetikamp.bsky.social/post/3mxen3xqmdw2p"}, {"timestamp": "2026-10-08T14:27:10.834Z", "date_only": false, "value": "2026-10-08T14:27:10.834172Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxeo5igodk2y", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "51ef13a0-3190-43ae-ae31-d455cacfe3f6", "content": "Threat actors exploit CVE-2026-21589 in Atlassian Data Center products to read specific root files, with heightened impact when Jira integrates with Crowd credentials.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxeo5igodk2y"}, {"timestamp": "2026-10-08T14:29:32.383Z", "date_only": false, "value": "2026-10-08T14:29:32.383873Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxeobpcuig2h", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "a52206f9-c993-4500-84b4-e090370e2002", "content": "Threat actors exploit CVE-2026-21589 in Atlassian Data Center products to read specific root files, with heightened impact when Jira integrates with Crowd credentials.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxeobpcuig2h"}, {"timestamp": "2026-10-08T14:29:40.073Z", "date_only": false, "value": "2026-10-08T14:29:40.073888Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxeobwnogr2r", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "9b629255-c550-4106-8b5f-292c9da6a906", "content": "Threat actors exploit CVE-2026-21589 in Atlassian Data Center products to read specific root files, with heightened impact when Jira integrates with Crowd credentials.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mxeobwnogr2r"}, {"timestamp": "2026-10-08T14:48:27.542Z", "date_only": false, "value": "2026-10-08T14:48:27.542251Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sipirtu.com/post/3mxepdjkm4e24", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "61aa2253-6335-4aec-a4ba-44b4d50a605a", "content": "Threat actors have begun targeting CVE-2026-21589, a critical vulnerability in Atlassian's self-hosted Data Center products, within hours of a proof-of-concept publication.\n\nSource: SecurityWeek", "url": "https://bsky.app/profile/sipirtu.com/post/3mxepdjkm4e24"}, {"timestamp": "2026-10-08T15:00:06Z", "date_only": false, "value": "2026-10-08T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fNPp5VF4N_K_7jFfrzFmVrvyeMbg1o3TAe02z72F9CjWFY8", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "fbd5374b-9382-4f87-826f-9e0b52c72d5a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-08T15:10:21Z", "date_only": false, "value": "2026-10-08T15:10:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ict_security/4972", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "eff206cf-8e3d-4a5c-a68b-72be62a930c0", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc Atlassian Data Center \u0646\u0627\u0634\u06cc \u0627\u0632 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631\u0627\u06cc \u0637\u0631\u0641\u200c\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc \u0642\u0627\u0628\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0647\u0633\u062a\u0646\u062f. \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0647\u06a9\u0631 \u06a9\u0647 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0639\u0645\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u062d\u0627\u0641\u0638\u062a\u200c\u0634\u062f\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\nBDU:2026-16016\nCVE-2026-21589\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u0632\u0646\u062f\u0647:\nhttps://jira.atlassian.com/browse/BAM-26567\nhttps://jira.atlassian.com/browse/BSERV-20604\nhttps://jira.atlassian.com/browse/CONFSERVER-104488\nhttps://jira.atlassian.com/browse/CRUC-8741\nhttps://jira.atlassian.com/browse/CWD-6610\nhttps://jira.atlassian.com/browse/FE-7583\nhttps://jira.atlassian.com/browse/JRASERVER-79546\nhttps://jira.atlassian.com/browse/JSDSERVER-16809\n\u00a0\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83e\udd81\u00ab\u06a9\u062a\u0627\u0633\u00bb\n\u200fhttp://t.me/ict_security", "url": "https://t.me/ict_security/4972"}, {"timestamp": "2026-10-08T15:22:29Z", "date_only": false, "value": "2026-10-08T15:22:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/56069", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "7c40bd25-d997-43e6-9d80-70dbf9d875bb", "content": "Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication\nhttps://www.securityweek.com/attackers-target-critical-atlassian-vulnerability-within-hours-of-poc-publication/\n\nThreat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian\u2019s self-hosted Data Center products.\nThe post Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication (https://www.securityweek.com/attackers-target-critical-atlassian-vulnerability-within-hours-of-poc-publication/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/56069", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-08T16:26:47.072Z", "date_only": false, "value": "2026-10-08T16:26:47.072495Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mxeutdhhk22e", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "b19ce4bd-f283-47f8-8773-1be5994f29af", "content": "Irre IT-Welt: Atlassian Schwachstelle CVE-2026-21589 bereits nach 2 Stunden angegriffen, Nius zum 4. Mal seit Sommer 2025 gehackt, jetzt liegen die Daten von Abonnenten etc. offen. Es gab einen ccTLD-Registry-Hack von drei L\u00e4ndern, und mehr.\n\nborncity.com/blog/2026/10...", "url": "https://bsky.app/profile/etguenni.bsky.social/post/3mxeutdhhk22e"}, {"timestamp": "2026-10-08T16:29:36.557Z", "date_only": false, "value": "2026-10-08T16:29:36.557842Z", "kind": "sighting", "label": "Seen", "source": "https://social.tchncs.de/users/gborn/statuses/117406225430409564", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "d2b76a01-29c8-4224-91f3-2c7ea1da7e78", "content": "Irre IT-Welt: Atlassian Schwachstelle CVE-2026-21589 bereits nach 2 Stunden angegriffen, Nius zum 4. Mal seit Sommer 2025 gehackt, jetzt liegen die Daten von Abonnenten etc. offen. Es gab einen ccTLD-Registry-Hack von drei L\u00e4ndern, und mehr.\nhttps://borncity.com/blog/2026/10/08/sicherheitssplitter-atlassian-cve-2026-21589-nius-leak-cctld-registry-hacks-etc/", "url": "https://social.tchncs.de/users/gborn/statuses/117406225430409564"}, {"timestamp": "2026-10-08T16:58:55.231Z", "date_only": false, "value": "2026-10-08T16:58:55.231406Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.social/users/jschauma/statuses/117406347153343214", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "c1131c73-f519-4705-8339-ec567e74f2d4", "content": "Oh, Atlassian, never change! \ud83d\ude2d\n\"CVE-2026-21589 - Arbitrary File Access Vulnerability impacts Multiple Products\"\nCVSS Score 9.3, so, you know, you better \"Test that your rule blocks .. immediately adjacent to /\".\nAPT /../../../../../../etc/passwd strikes again.\nhttps://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html", "url": "https://mstdn.social/users/jschauma/statuses/117406347153343214"}, {"timestamp": "2026-10-08T16:59:01.006Z", "date_only": false, "value": "2026-10-08T16:59:01.006661Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3mxewmsp4zn62", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "2125d022-38f8-4871-8b17-e40552251a34", "content": "Oh, Atlassian, never change! \ud83d\ude2d\n\n\"CVE-2026-21589 - Arbitrary File Access Vulnerability impacts Multiple Products\"\n\nCVSS Score 9.3, so, you know, you better \"Test that your rule blocks .. immediately adjacent to /\".\n\nAPT /../../../../../../etc/passwd strikes again [\u2026]", "url": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3mxewmsp4zn62"}, {"timestamp": "2026-10-08T17:57:06.518Z", "date_only": false, "value": "2026-10-08T17:57:06.518256Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/robcampbell.bsky.social/post/3mxezurpze22f", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "fd577771-3bb5-42f5-a54c-016de4f0b8bb", "content": "CVE-2026-21589 lets unauthenticated attackers read specific files from eight Atlassian products. Patch now.\n\nconfluence.atlassian.com/security/cve...\n\n#Cybersecurity #Atlassian", "url": "https://bsky.app/profile/robcampbell.bsky.social/post/3mxezurpze22f"}, {"timestamp": "2026-10-08T19:00:15Z", "date_only": false, "value": "2026-10-08T19:00:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-5xyNcNT9Pq8uJJyqgS1nE7lkzYXBSkMsIwCtM8qhLYWiCI", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "f2b479b1-4d9f-4528-b3c1-f2b88c30798c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-08T21:00:04Z", "date_only": false, "value": "2026-10-08T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hRHSAf3bOXL1t8aTCse-mTaLSNrW_REwFx5yQVn12_bx7bQ", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "007222de-a83d-4e48-a191-bb846ae364cc", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-08T21:00:04Z", "date_only": false, "value": "2026-10-08T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/hRHSAf3bOXL1t8aTCse-mTaLSNrW_REwFx5yQVn12_bx7bQ", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "fa32a1be-6a67-41ab-9d2d-f8ffba176b33"}, {"timestamp": "2026-10-08T22:20:24Z", "date_only": false, "value": "2026-10-08T22:20:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/3294", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "7254a34d-f337-4d5c-9e55-1902c3a6c9c9", "content": "That\u2019s how quickly exploitation attempts followed public details for Atlassian CVE-2026-21589.\n\nThe flaw lets unauthenticated attackers access specific webroot files when exact paths are known. Fixes are available.", "url": "https://t.me/CyberDispatch/3294"}, {"timestamp": "2026-10-08T23:00:50Z", "date_only": false, "value": "2026-10-08T23:00:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/44830", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "1c5eebb1-a17e-404a-9e78-68902a6279b3", "content": "Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication\n\nThreat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian\u2019s self-hosted Data Center products.\nThe post Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication appeared first on SecurityWeek.\nhttps://www.securityweek.com/attackers-target-critical-atlassian-vulnerability-within-hours-of-poc-publication/", "url": "https://t.me/VulnerabilityNews/44830", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-08T23:00:50Z", "date_only": false, "value": "2026-10-08T23:00:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/44830", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "1042d23e-44c0-4975-ad8a-c9671c43cf57", "content": "Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication\n\nThreat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian\u2019s self-hosted Data Center products.\nThe post Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication appeared first on SecurityWeek.\nhttps://www.securityweek.com/attackers-target-critical-atlassian-vulnerability-within-hours-of-poc-publication/", "url": "https://t.me/VulnerabilityNews/44830"}, {"timestamp": "2026-10-08T23:02:05.601Z", "date_only": false, "value": "2026-10-08T23:02:05.601810Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxfkw56hic2y", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "43546373-ad06-468f-9b4d-5da207825d9c", "content": "Atlassian\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027 CVE-2026-21589\u3001PoC\u516c\u958b\u5f8c\u306b\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u3078\u306e\u8a66\u884c\u3092\u89b3\u6e2c-Jira\u30fbConfluence\u306a\u30698\u88fd\u54c1 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxfkw56hic2y"}, {"timestamp": "2026-10-09T03:00:05Z", "date_only": false, "value": "2026-10-09T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4hNeHS36zsvExvGlzuednv3uNbGR2hZwdosOZkBARt81j7I", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "85bbf632-cc3f-49bd-9d25-16926aee81e0", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-09T03:00:05Z", "date_only": false, "value": "2026-10-09T03:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/4hNeHS36zsvExvGlzuednv3uNbGR2hZwdosOZkBARt81j7I", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "1581963f-8cf6-4749-9aa7-97e9fd7babd9"}, {"timestamp": "2026-10-09T03:11:00.071Z", "date_only": false, "value": "2026-10-09T03:11:00.071814Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/omkamble.bsky.social/post/3mxfyt4vmzk22", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "93e369d0-d7fb-43f2-8d51-315a8dc3809d", "content": "Atlassian's CVE-2026-21589 has a neat detail: its web-resource code treats :: as /, so ..:: acts like ../ in a URL. That's why Atlassian's block rule also matches ::.\n\nThe attacker must know the exact path, but is that ever a real defense when config locations are documented?", "url": "https://bsky.app/profile/omkamble.bsky.social/post/3mxfyt4vmzk22"}, {"timestamp": "2026-10-09T03:12:01.817Z", "date_only": false, "value": "2026-10-09T03:12:01.817140Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/117408761172402517", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "2be00344-5c87-44c1-b6f0-0e178ee2d7a8", "content": "You Won\u2019t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/", "url": "https://infosec.exchange/users/patrickcmiller/statuses/117408761172402517"}, {"timestamp": "2026-10-09T06:00:44.484Z", "date_only": false, "value": "2026-10-09T06:00:44.484614Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxgcct45hc24", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "08fcc446-59cf-43c3-a048-c90db4ed5819", "content": "Atlassian Vulnerability Comes Under Attack Hours After Details Go Public\n\nThreat actors are exploiting CVE-2026-21589, a critical Atlassian flaw that can expose sensitive files across multiple Data Center products. Threat actors have started exploiting CVE-2026-21589 (CVSS score o\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxgcct45hc24"}, {"timestamp": "2026-10-09T06:42:00.005Z", "date_only": false, "value": "2026-10-09T06:42:00.005794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxgemmfvrd2p", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "0f386b2d-8b79-4435-9003-79ce528af59b", "content": "Same story, different day, as self-hosted Atlassian Data Center users find themselves immediately targeted thanks to a shiny new critical flaw, CVE-2026-21589. If we fancy surviving this relentless circus, scrambling to patch these vulnerable servers before lunch is our only desp...\n\nRead full story", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxgemmfvrd2p"}, {"timestamp": "2026-10-09T07:58:06.463Z", "date_only": false, "value": "2026-10-09T07:58:06.463656Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxgiup3nus22", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "9d3db425-08f3-4386-ba5a-db1c98f6641a", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 77 interactions\nCVE-2026-88779: 47 interactions\nCVE-2026-104286: 26 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-21589: 11 interactions\nCVE-2026-84303: 6 interactions\nCVE-2026-84304: 6 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxgiup3nus22"}, {"timestamp": "2026-10-09T09:10:01.886Z", "date_only": false, "value": "2026-10-09T09:10:01.886050Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117410168933661652", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "1107e905-10e1-40f5-b896-8bc4e6d0edd6", "content": "Atlassian Vulnerability Comes Under Attack Hours After Details Go Public\nThreat actors began exploiting CVE-2026-21589, a critical Atlassian flaw that can expose sensitive files across multiple Data Center products, just hours after technical details went public, Security Affairs reports. The rapid weaponization leaves administrators a razor-thin patching window. https://securityaffairs.com/200591/security/atlassian-vulnerability-comes-under-attack-hours-after-details-go-public.html", "url": "https://infosec.exchange/users/edwardk/statuses/117410168933661652"}, {"timestamp": "2026-10-09T09:10:03.400Z", "date_only": false, "value": "2026-10-09T09:10:03.400171Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxgmvdltac27", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "14aee977-5480-47f0-ac46-a35790139c98", "content": "Atlassian Vulnerability Comes Under Attack Hours After Details Go Public\n\nThreat actors began exploiting CVE-2026-21589, a critical Atlassian flaw that can expose sensitive files across multiple Data Center products... https://threatintel.cc/2026/10/09/atlassian-vulnerability-comes-under-attack.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxgmvdltac27"}, {"timestamp": "2026-10-09T12:56:26.369Z", "date_only": false, "value": "2026-10-09T12:56:26.369108Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxgzk5nmem2y", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "c73b8577-70dd-40c5-b8d0-0b9a53260152", "content": "Hackers rapidly exploit the Atlassian vulnerability CVE-2026-21589. Learn how this critical flaw compromises Jira, Confluence, and Bitbucket security.\n\n#Atlassian #CVE202621589 #CyberSecurity #Jira #TechNews", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxgzk5nmem2y"}, {"timestamp": "2026-10-09T13:06:29.890Z", "date_only": false, "value": "2026-10-09T13:06:29.890543Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxh245phzh2i", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "eab87474-21e0-44a4-97be-b2444bc9c587", "content": "Atlassian\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u6280\u8853\u89e3\u8aac\u306e\u516c\u958b\u304b\u3089\u308f\u305a\u304b2\u6642\u9593\u3067\u60aa\u7528\u304c\u59cb\u307e\u308b\n\nAtlassian\u88fd\u30b5\u30fc\u30d0\u30fc\u3092\u72d9\u3046\u653b\u6483\u304c\u3001\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cCVE-2026-21589\u300d\u3092\u60aa\u7528\u3059\u308b\u5f62\u3067\u59cb\u307e\u308a\u307e\u3057\u305f\u3002\u5c02\u9580\u5bb6\u304c\u6280\u8853\u7684\u306a\u89e3\u8aac\u3068PoC\uff08\u6982\u5ff5\u5b9f\u8a3c\uff09\u30b3\u30fc\u30c9\u3092\u516c\u958b\u3057\u3066\u304b\u3089\u3001\u308f\u305a\u304b2\u6642\u9593\u5f8c\u306e\u3053\u3068\u3067\u3059\u3002\u3053\u306e\u6df1\u523b\u306a\u6b20\u9665\u306f\u3001Jira\u3001Confluence\u3001Bitbucket\u306a\u3069\u3001\u4f01\u696d\u5411\u3051\u306e\u4e3b\u89818\u88fd\u54c1\u306b", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxh245phzh2i"}, {"timestamp": "2026-10-09T17:14:02Z", "date_only": false, "value": "2026-10-09T17:14:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104816", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "957679ef-06d5-4c03-9bc5-06c6371a3742", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Confluence #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a AtlasSniper\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ynsmroztas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 7  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-09 16:04:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-21589 detector for Atlassian Data Center webresource traversal. Pre-auth webroot file read confirm for Jira, Confluence and Bitbucket.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104816", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-09T17:14:02Z", "date_only": false, "value": "2026-10-09T17:14:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/104816", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "64e9b56a-9b41-45b8-bbbf-5e44de19a381", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Confluence #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a AtlasSniper\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ynsmroztas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 7  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-09 16:04:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-21589 detector for Atlassian Data Center webresource traversal. Pre-auth webroot file read confirm for Jira, Confluence and Bitbucket.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104816"}, {"timestamp": "2026-10-09T23:00:20Z", "date_only": false, "value": "2026-10-09T23:00:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/xJlliZq6PM6gLtTnfzdz3XcYgCoDNuJ4DdZ-DnrbWNoWDao", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "0d3e2dbd-8471-40a5-aec9-29f095949fda", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-09T23:00:20Z", "date_only": false, "value": "2026-10-09T23:00:20.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/xJlliZq6PM6gLtTnfzdz3XcYgCoDNuJ4DdZ-DnrbWNoWDao", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "ca5907a9-29f0-45a7-ba11-d69cad1e7629"}, {"timestamp": "2026-10-10T03:00:05Z", "date_only": false, "value": "2026-10-10T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kzHoJnP-mUcYv7pzVZ4-ed6rxIlsSw7pMZ8r6JcGsu63b6g", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "2678af2a-a60e-4895-bfde-665ee3660944", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-10T03:00:05Z", "date_only": false, "value": "2026-10-10T03:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/kzHoJnP-mUcYv7pzVZ4-ed6rxIlsSw7pMZ8r6JcGsu63b6g", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "2bdb8205-27b6-420b-980e-24c8fb3999c6"}, {"timestamp": "2026-10-10T07:42:22.922Z", "date_only": false, "value": "2026-10-10T07:42:22.922639Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxiyhiupch2b", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "efd8b4ea-8280-4765-b955-4d7ddbfa6ed6", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 78 interactions\nCVE-2026-88779: 47 interactions\nCVE-2026-102255: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-102255: 9 interactions\nCVE-2026-107181: 4 interactions\nCVE-2026-107406: 4 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxiyhiupch2b"}, {"timestamp": "2026-10-10T10:18:24.179Z", "date_only": false, "value": "2026-10-10T10:18:24.179672Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/compliancecolleague.ai/post/3mxjb6hv4yw25", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "77abbf04-56d9-4e8a-8e48-3b6e8e9f1ca4", "content": "A file-read bug in self-hosted Atlassian (CVE-2026-21589, CVSS 9.3) became a Jira admin account in watchTowr's tests, via credentials in a config file.\n\nPatch or take exposed instances offline, and move secrets out of config files.\n\nCompliance Colleague \u2192 compliancecolleague.ai/?ref=bsky", "url": "https://bsky.app/profile/compliancecolleague.ai/post/3mxjb6hv4yw25"}, {"timestamp": "2026-10-10T15:35:48.094Z", "date_only": false, "value": "2026-10-10T15:35:48.094896Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cysecuritynews.bsky.social/post/3mxjsvzyhoi22", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "e5456c2c-7090-40a4-8a8f-e1eed9312029", "content": "Atlassian CVE-2026-21589 Exploited Hours After Public Disclosure #blockingunauthorizedaccess #CredentialSecurity #CVE", "url": "https://bsky.app/profile/cysecuritynews.bsky.social/post/3mxjsvzyhoi22"}, {"timestamp": "2026-10-11T07:47:07.654Z", "date_only": false, "value": "2026-10-11T07:47:07.654537Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxlj6vw3px2b", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "f16758f8-6f32-49ec-8f37-dde3f44dd1d7", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 78 interactions\nCVE-2026-88779: 47 interactions\nCVE-2026-102255: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-75650: 7 interactions\nCVE-2026-107406: 6 interactions\nCVE-2026-104398: 4 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxlj6vw3px2b"}, {"timestamp": "2026-10-11T11:00:02.047Z", "date_only": false, "value": "2026-10-11T11:00:02.047688Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mxltxu2u4j2a", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "1b3e9b0e-bb1f-4d6d-9cc1-f9eaa0574603", "content": "CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products\n\nThis article heavily emphasizes patching as the primary mitigation, yet it dedicates significant space to demonstrating a specific path traversal vector exploiting double-colon sequences. If an or\u2026\n\nvia Rapid7 Blog", "url": "https://bsky.app/profile/arc-codex.com/post/3mxltxu2u4j2a"}, {"timestamp": "2026-10-11T23:07:06.764Z", "date_only": false, "value": "2026-10-11T23:07:06.764417Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxn4lxsjfc2z", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "606a8636-dafa-416f-995e-22bb24f10b76", "content": "\ud83d\udccc You Won't Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary ... https://www.cyberhub.blog/article/33029-you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589-watchtowr-labs", "url": "https://bsky.app/profile/cyberhub.blog/post/3mxn4lxsjfc2z"}, {"timestamp": "2026-10-12T13:35:16.254Z", "date_only": false, "value": "2026-10-12T13:35:16.254062Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3mxon4c7l722b", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "5abd1355-01d7-4a0f-a974-9d2b1663809e", "content": "\ud83d\udea8 CVE-2026-21589: critical file read in Atlassian Jira, Confluence & Bitbucket Data Center, already targeted.\n\nCrowdSec has seen 89 IPs probing it since Oct 7.\n\nPatch, then rotate the Crowd app password.\n\nAnalysis + fixes: www.crowdsec.net/vulntracking...", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3mxon4c7l722b"}, {"timestamp": "2026-10-12T16:02:50.453Z", "date_only": false, "value": "2026-10-12T16:02:50.453084Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxoveagopl22", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "f4c2e235-1a79-49bd-b76f-26e29c37bb6a", "content": "~Checkpoint~\nGlobal attacks rose 48%; critical flaws, ransomware, AI phishing, and espionage campaigns threaten organizations.\n-\nIOCs: CVE-2025-64393, CVE-2026-21589, CVE-2026-76455\n-\n#Ransomware #ThreatIntel #Vulnerabilities", "url": "https://bsky.app/profile/cyfar.ca/post/3mxoveagopl22"}, {"timestamp": "2026-10-13T08:22:40.751Z", "date_only": false, "value": "2026-10-13T08:22:40.751862Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxqm4d56tu26", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "b63ea492-1cbd-48de-88a9-22e1a0701a12", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 79 interactions\nCVE-2026-102255: 21 interactions\nCVE-2026-107406: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-97229: 14 interactions\nCVE-2026-92392: 7 interactions\nCVE-2025-41450: 5 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxqm4d56tu26"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-14)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "23d5fab6-5733-4ef5-8caa-72c5b42c6805", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-14T06:39:37.348Z", "date_only": false, "value": "2026-10-14T06:39:37.348340Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxswsxnicu25", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "5591ff96-59bf-4b39-9d5a-58cd7f354981", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 50 interactions\nCVE-2026-97229: 28 interactions\nCVE-2026-104935: 26 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-104935: 26 interactions\nCVE-2026-97229: 14 interactions\nCVE-2026-105445: 8 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxswsxnicu25"}, {"timestamp": "2026-10-14T08:30:05.404Z", "date_only": false, "value": "2026-10-14T08:30:05.404648Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/secureinseconds.com/post/3mxt4yicaoh2g", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "cc47913a-ae9d-4b5a-ace3-f600fc890de8", "content": "CVE-2026-21589: pre-auth file access, CVSS 9.3, in eight Atlassian Data Center products incl. Jira and Confluence. Fixed 5 Oct. The question is not whether you are vulnerable but what an attacker would have read: https://secureinseconds.com/blog/2026-10-11-atlassian-cve-2026-21589-preauth-file-read", "url": "https://bsky.app/profile/secureinseconds.com/post/3mxt4yicaoh2g"}, {"timestamp": "2026-10-14T11:32:18Z", "date_only": false, "value": "2026-10-14T11:32:18+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2026-21589", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d38c3614-a79a-4e76-85d3-46090b01de06", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T11:32:18Z", "date_only": false, "value": "2026-10-14T11:32:18+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-21589", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "d38c3614-a79a-4e76-85d3-46090b01de06", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-21589", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0f6d1cec-aeee-4e38-a984-412824d75670", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": true, "value": "2026-10-15", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-21589", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": true, "value": "2026-10-15", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-21589", "field": "evidence.0.details.date_added", "uuid": "0f6d1cec-aeee-4e38-a984-412824d75670", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-15)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "bf38af21-fc8c-4ec1-a7be-f01a3f778025", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-21589", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0f6d1cec-aeee-4e38-a984-412824d75670", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-21589", "field": "status.status_updated_at", "uuid": "0f6d1cec-aeee-4e38-a984-412824d75670", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T05:00:00Z", "date_only": false, "value": "2026-10-15T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/alerts/2026/10/15/cisa-adds-one-known-exploited-vulnerability-catalog", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "893d771d-1468-4130-bb55-57ada715161a", "url": "https://www.cisa.gov/news-events/alerts/2026/10/15/cisa-adds-one-known-exploited-vulnerability-catalog"}, {"timestamp": "2026-10-15T17:58:55.012Z", "date_only": false, "value": "2026-10-15T17:58:55.012686Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mxwnakezrg2i", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "c42265e4-ceda-4c92-b66c-bfa1836e4500", "content": "\ud83d\uded1 CVE-2026-21589\nAtlassian Multiple Products\nCVSS 9.3 / EPSS 3% / KEV \u2705\nTL;DR: This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Se\u2026\nhttps://cvesentinel.com/report/CVE-2026-21589?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mxwnakezrg2i"}, {"timestamp": "2026-10-15T18:00:01Z", "date_only": false, "value": "2026-10-15T18:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-21589", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0f6d1cec-aeee-4e38-a984-412824d75670", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T18:00:02.266Z", "date_only": false, "value": "2026-10-15T18:00:02.266138Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0f6d1cec-aeee-4e38-a984-412824d75670", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "ca5ecc7a-6c86-4869-98a4-c63a099e8b23", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0f6d1cec-aeee-4e38-a984-412824d75670", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-15T18:10:05.723Z", "date_only": false, "value": "2026-10-15T18:10:05.723680Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techupscale.com/post/3mxwnuj662c2l", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "4a353efd-1c71-4a60-8919-65bb403b5c2a", "content": "\ud83d\udea8 BREAKING: Atlassian Multiple Products flaw CVE-2026-21589 is being actively exploited, CISA warns\n\nCVE-2026-21589  \u00b7  CVSS 9.3 Critical  \u00b7  US federal deadline October 18, 2026  \u00b7  CISA KEV\n\n#cybersecurity #vulnerability", "url": "https://bsky.app/profile/techupscale.com/post/3mxwnuj662c2l"}, {"timestamp": "2026-10-15T18:15:04.008Z", "date_only": false, "value": "2026-10-15T18:15:04.008458Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mxwo5gmiku2j", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "5c3e5b91-5a96-47f9-9d5c-58075d3ea2c0", "content": "\ud83d\udea8 NEW on CISA KEV \u2014 exploited in the wild\nAtlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerabil\nCVE-2026-21589 \u00b7 patch by 2026-10-18\n\ud83d\udd17 https://ninjasignal.ninja/intel/cve/CVE-2026-21589\n#KEV #cybersecurity #infosec", "url": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mxwo5gmiku2j"}, {"timestamp": "2026-10-15T18:20:04.312Z", "date_only": false, "value": "2026-10-15T18:20:04.312804Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mxwogdxtwd2l", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "1f67c9fa-51d0-4edb-8e5f-8f38686c043e", "content": "CISA added CVE-2026-21589 to its Known Exploited Vulnerabilities list (2026-10-15).\nAtlassian Multiple Products Files or Directories Accessible to External Parties\nEPSS today: 0.028 (no score 30 days earlier)\n#infosec #KEV", "url": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mxwogdxtwd2l"}, {"timestamp": "2026-10-15T19:00:15.059Z", "date_only": false, "value": "2026-10-15T19:00:15.059001Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mxwqoa6l5u2i", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "a22d6798-98b9-47d4-ac34-e25ab5427501", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1015)\n\n\u26a0\ufe0f CVE-2026-21589 - Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "url": "https://bsky.app/profile/secdb.bsky.social/post/3mxwqoa6l5u2i"}, {"timestamp": "2026-10-15T19:51:56.933Z", "date_only": false, "value": "2026-10-15T19:51:56.933226Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxwtkoeeps26", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "12da3816-8a1a-4c02-873f-d605930eb329", "content": "CISA added CVE-2026-21589, CVSS 9.3, to KEV today \u2014 unauthenticated file disclosure across Bitbucket, Confluence, Jira, Bamboo and Crowd Data Center. Patch now, federal deadline 18 Oct. https://cti.securitycyber.uk", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxwtkoeeps26"}, {"timestamp": "2026-10-15T22:44:31.161Z", "date_only": false, "value": "2026-10-15T22:44:31.161537Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mariogalarza.bsky.social/post/3mxx57b2pyi2u", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "08a16a0c-d691-4800-a80a-fdf34ba1c315", "content": "CISA confirms active exploitation of CVE-2026-21589: unauthenticated file access on Jira, Confluence, Bitbucket and more Atlassian products. Internet-facing? Patch now. https://www.linkedin.com/feed/update/urn:li:share:7516630079020482560/", "url": "https://bsky.app/profile/mariogalarza.bsky.social/post/3mxx57b2pyi2u"}, {"timestamp": "2026-10-15T23:00:56Z", "date_only": false, "value": "2026-10-15T23:00:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/44951", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "2053a1ec-8430-4095-b38b-2ac622203073", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its\u00a0Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability\u00a0\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of\u00a0KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the\u00a0specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s\u00a0KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/10/15/cisa-adds-one-known-exploited-vulnerability-catalog", "url": "https://t.me/VulnerabilityNews/44951", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-16)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "019d3336-04a1-49f1-a649-e245d40cef10", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-16)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "ae376ae2-c67d-4936-828f-8193b75ae990"}, {"timestamp": "2026-10-16T03:56:41.309Z", "date_only": false, "value": "2026-10-16T03:56:41.309201Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-21589", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T03:56:41.309Z", "date_only": false, "value": "2026-10-16T03:56:41.309201Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-21589", "record": "FKIE_CVE-2026-21589", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-16T06:30:23.324Z", "date_only": false, "value": "2026-10-16T06:30:23.324118Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mxxxaccglg2d", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "edc47eb4-fcd0-4773-9bac-038645075ef4", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-21589: \u26a0\ufe0f CVE-2026-21589: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 2.8%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-21589-this-is-a-vulnerability-in-bitbucket", "url": "https://bsky.app/profile/threatspotai.bsky.social/post/3mxxxaccglg2d"}, {"timestamp": "2026-10-16T07:08:04.032Z", "date_only": false, "value": "2026-10-16T07:08:04.032777Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinity.sh/post/3mxxzdoglvm22", "record": "cve-2026-21589", "field": "creation_timestamp", "uuid": "a33f15c8-e9ba-42da-95b8-d857f20386ac", "content": "CVE-2026-21589: 8 Atlassian Data Center products, one shared lib, one unauthenticated file read. Added to CISA KEV Oct 15.\n\nhttps://trinity.sh/posts/2026-10-16-atlassian-cve-2026-21589-kevs/", "url": "https://bsky.app/profile/trinity.sh/post/3mxxzdoglvm22"}, {"timestamp": "2026-10-16T08:57:35Z", "date_only": false, "value": "2026-10-16T08:57:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7956", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "12a312e9-d7d6-42b1-8959-778dec217344", "content": "#DiyakoSecureBow\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\nCISO as a Service (vCISO)\n\nCybersecurity Update | Atlassian, Google Chrome & AI-Driven Vulnerability Discovery\n\nRecent security developments involving Atlassian Data Center products and Google Chrome 155 highlight growing challenges in enterprise vulnerability management.\n\n\ud83d\udd39 Atlassian (CVE-2026-21589): A critical vulnerability potentially exposing sensitive files across enterprise platforms, including Jira, Confluence, and Bitbucket.\n\n\ud83d\udd39 Google Chrome 155: A major security update addressing 247 vulnerabilities, including critical use-after-free flaws. Notably, AI-assisted research contributed to identifying two critical vulnerabilities.\n\nThese developments reinforce three priorities for CISOs:\n\n1. Risk-Based Prioritization: Evaluate vulnerabilities based on business impact, asset criticality, and data sensitivity not CVSS scores alone.\n\n2. Enterprise Patch Governance: Ensure timely remediation across browsers, collaboration platforms, and development environments.\n\n3. AI-Driven Security Readiness: Prepare security teams for faster vulnerability discovery through AI-assisted research, while maintaining rigorous validation and remediation processes.\n\nThe CISO challenge is no longer just identifying vulnerabilities. It is building the organizational capability to respond faster than the risk evolves.\n\nSpecial Thanks\ud83d\ude4f\ud83e\udd19\ud83c\udffe\ud83d\ude01\nhttps://lnkd.in/dSbMVhx9\nhttps://lnkd.in/fYHu3GY\nhttps://lnkd.in/g3n_z6GT\n\n\u2013Security you can rely on\u2013\n\n2026.10.15\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\n#CyberSecurity #CISO #vCISO #GoogleChrome #Atlassian #VulnerabilityManagement #AISecurity #GR\n\nhttps://www.linkedin.com/posts/diyako-secure-bow_diyakosecurebow-cybersecurity-ciso-activity-7516393714831745024-YdXt", "url": "https://t.me/cissp/7956"}, {"timestamp": "2026-10-16T11:50:40.240Z", "date_only": false, "value": "2026-10-16T11:50:40.240991Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-8394c816-05bba066a244f529", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "c1040fd9-f032-45ae-8a61-1de3a0fba937", "content": "U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Atlassian flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Atlassian flaw, tracked as CVE-2026-21589 (CVSS score of 9.3), to its Known Exploited Vulnerabilities (KEV) catalog. In early October, threat actors started exploiting CVE-2026-21589, a critical arbitrary file access flaw [\u2026]U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog", "url": "https://poliverso.org/objects/0477a01e-8394c816-05bba066a244f529"}, {"timestamp": "2026-10-16T11:51:09.630Z", "date_only": false, "value": "2026-10-16T11:51:09.630736Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxyj5j7qyl22", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "c798185a-873d-4f78-972c-4255fb9a9bda", "content": "U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Atlassian flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Atlassian flaw, tracked as CVE-2026-21589 (CVSS score of 9.3), to its Known Exploited [\u2026]", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxyj5j7qyl22"}, {"timestamp": "2026-10-16T14:22:51.045Z", "date_only": false, "value": "2026-10-16T14:22:51.045182Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxyrn3po6zvl", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "614cbecb-acb3-4e24-9c89-114fac34336d", "content": "CISA KEV | CVE-2026-21589 | Atlassian / Multiple Products\n\nCISA lists this vulnerability as exploited in the wild. Check affected products and vendor guidance.\n\nSource: CISA KEV\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1282", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxyrn3po6zvl"}, {"timestamp": "2026-10-17T00:00:00Z", "date_only": false, "value": "2026-10-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-17)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "c920a4fe-46ae-4169-a3cf-0bf131f7fc40", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-17T14:05:13.542Z", "date_only": false, "value": "2026-10-17T14:05:13.542733Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deceptioncheck.bsky.social/post/3my3b4i2nob2z", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "4f873d0a-b928-4154-b569-bf94e1957ae7", "content": "CVE-2026-21589 entered KEV October 15. The demonstrated Jira-to-Crowd chain turns a file read into a credential problem, with further API steps needed for admin access.\n\nPatch, assess exposure, and review account changes.\nhttps://deceptioncheck.ai/blog/atlassian-file-read-crowd-credentials", "url": "https://bsky.app/profile/deceptioncheck.bsky.social/post/3my3b4i2nob2z"}, {"timestamp": "2026-10-18T00:00:00Z", "date_only": true, "value": "2026-10-18", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-21589", "field": "evidence.0.details.due_date", "uuid": "0f6d1cec-aeee-4e38-a984-412824d75670", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-18T00:00:00Z", "date_only": false, "value": "2026-10-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-18)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "2d61f90a-2d9b-4cfe-8549-b7c36c73cd94", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-19T18:26:40.891Z", "date_only": false, "value": "2026-10-19T18:26:40.891Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / atlassian", "record": "CVE-2026-21589", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-19T21:35:53Z", "date_only": false, "value": "2026-10-19T21:35:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GR66-X5PQ-8G2G", "record": "GHSA-GR66-X5PQ-8G2G", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-20)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "c4e42acf-da5c-4f21-b4b0-d0194d456911", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-21T08:50:53.482Z", "date_only": false, "value": "2026-10-21T08:50:53.482376Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d38c3614-a79a-4e76-85d3-46090b01de06", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "bf9af58a-a777-4030-9ab2-d26dc9f3d1b6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d38c3614-a79a-4e76-85d3-46090b01de06", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-22)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "285d7c65-8e87-4aa1-8028-1dbdf4ac6916", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-23)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "236c39c5-5cbb-4e35-8255-7fd87dcedcea", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-23T19:00:12Z", "date_only": false, "value": "2026-10-23T19:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_ivhtDr94S-YBW6t6q2dDPmZ8tkweQj2_oYCRuYxQgctAsU", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "3136de57-1447-4c29-8187-b1ae3eef70ea", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-23T19:00:12Z", "date_only": false, "value": "2026-10-23T19:00:12.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_ivhtDr94S-YBW6t6q2dDPmZ8tkweQj2_oYCRuYxQgctAsU", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "5bef1652-9faf-4aa8-83d6-6638fbacd09f"}, {"timestamp": "2026-10-28T00:00:00Z", "date_only": false, "value": "2026-10-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-28)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "79dbd0c6-6d86-494a-8b1a-949f948f395e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-29T12:04:46.110Z", "date_only": false, "value": "2026-10-29T12:04:46.110Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-21589", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-29T12:04:46.110Z", "date_only": false, "value": "2026-10-29T12:04:46.110Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-21589", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-29T13:17:09.847Z", "date_only": false, "value": "2026-10-29T13:17:09.847", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-21589", "record": "FKIE_CVE-2026-21589", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-03)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "3d73197e-1092-4843-883b-3cfc745c7bcd", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-04)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "5a598bb2-c07d-4155-badd-f9fada053b42", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-21589", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "ca794994-53b1-4f27-8263-ee62a3eb8e2c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T13:52:15.796Z", "date_only": false, "value": "2026-11-04T13:52:15.796379Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mziirv3ruk2o", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "2b15f3c0-5e0c-4beb-ae61-8c3958cda627", "content": "\u8907\u6570\u306eAtlassian\u88fd\u54c1\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u8106\u5f31\u6027\n\nAtlassian\u306e\u8907\u6570\u88fd\u54c1\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u8106\u5f31\u6027\u300cCVE-2026-21589\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u91cd\u8981\u5ea6\u306f\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\uff08Critical\uff09\u300d\u3068\u3057\u3066\u304a\u308a\u3001\u7279\u306b\u30c7\u30fc\u30bf\u30bb\u30f3\u30bf\u30fc\u88fd\u54c1\u306f\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u3068\u3057\u3066\u5229\u7528\u8005\u306b\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95932026\u5e7410\u67085\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u300cCVE-2026-21589\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u300cBitbucket Data Center\u300d\u300cConfluence Data Center\u300d\u300cJira Service Management ...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mziirv3ruk2o"}, {"timestamp": "2026-11-04T20:00:49.147Z", "date_only": false, "value": "2026-11-04T20:00:49.147421Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mzj5eqcumk2n", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "4e3ebe52-d7aa-42b4-a2c8-794d67e855e9", "content": "Atlassian\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c8\u3064\u306e\u88fd\u54c1\u306b\u308f\u305f\u308b\u65e2\u77e5\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308b\u3053\u3068\u304c\u53ef\u80fd\u306b\u306a\u308b\n\n\u9867\u5ba2\u81ea\u8eab\u304c\u30db\u30b9\u30c8\u3059\u308bAtlassian Data Center\u88fd\u54c18\u7a2e\u985e\u306b\u91cd\u5927\u306a\u6b20\u9665\u304c\u3042\u308a\u3001\u30ed\u30b0\u30a4\u30f3\u6a29\u9650\u3092\u6301\u305f\u306a\u3044\u653b\u6483\u8005\u304c\u3001\u5404\u88fd\u54c1\u306eWeb\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30eb\u30fc\u30c8\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u3042\u308b\u7279\u5b9a\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308b\u3053\u3068\u304c\u53ef\u80fd\u306b\u306a\u3063\u3066\u3044\u308b\u3002\n\n\u653b\u6483\u8005\u306f\u30d5\u30a1\u30a4\u30eb\u306e\u6b63\u78ba\u306a\u540d\u524d\u3068\u30d1\u30b9\u3092\u65e2\u306b\u77e5\u3063\u3066\u3044\u308b\u5fc5\u8981\u304c\u3042\u308a\u3001\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u5185\u5bb9\u3092\u628a\u63e1\u3059\u308b\u3053\u3068\u306f\u3067\u304d\u307e\u305b\u3093\u3002\u30a2\u30c8\u30e9\u30b7\u30a2\u30f3\u306f10\u67085\u65e5\u306b\u3053\u306e\u8106\u5f31\u6027\uff08CVE-2026-21589\uff09\u3092\u516c\u8868\u3057\u300110\u70b9\u6e80\u70b9\u4e2d9.3\u70b9\u3068\u8a55\u4fa1\u3059\u308b\u3068\u3068\u3082\u306b\u3001\u5404\u88fd\u54c1\u306e\u4fee...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mzj5eqcumk2n"}, {"timestamp": "2026-11-05T00:00:00Z", "date_only": false, "value": "2026-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-05)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "7d0d1c6a-f754-4ec7-985c-f666f331e7ee", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-06)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "05180b45-8534-4ab4-ad20-bc9fe4b25353", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-07T00:00:00Z", "date_only": false, "value": "2026-11-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-07)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "6f785a3b-5771-415a-84ed-e93bc6d51e96", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-07T04:08:10.657Z", "date_only": false, "value": "2026-11-07T04:08:10.657888Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mzozk4pjvs2l", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "990dd824-ed55-4eda-8991-8d27829e2db0", "content": "Atlassian\u793e\u30018\u88fd\u54c1\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nCVE-2026-21589\uff08CVSS\u30b9\u30b3\u30a29.3\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306f\u3001\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u306b\u95a2\u3059\u308b\u554f\u984c\u3068\u3057\u3066\u8aac\u660e\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u8a8d\u8a3c\u306a\u3057\u3067\u60aa\u7528\u3055\u308c\u3001Web\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30eb\u30fc\u30c8\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u5185\u306e\u7279\u5b9a\u306e\u30d5\u30a1\u30a4\u30eb\u306b\u30a2\u30af\u30bb\u30b9\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\n\u300c\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u306b\u306f\u3001\u5bfe\u8c61\u30d5\u30a1\u30a4\u30eb\u306e\u6b63\u78ba\u306a\u540d\u524d\u3068\u30d1\u30b9\u3092\u4e8b\u524d\u306b\u77e5\u3063\u3066\u3044\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u3067\u306f\u3001\u653b\u6483\u8005\u304c\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u5185\u5bb9\u3092\u5217\u6319\u3057\u305f\u308a\u4e00\u89a7\u8868\u793a\u3057\u305f\u308a\u3059\u308b\u3053\u3068\u306f\u3067\u304d\u307e\u305b\u3093\u3002\u69cb\u6210\u306b\u3088\u3063\u3066\u306f\u3001\u30ea\u30b9\u30af\u3092\u9ad8\u3081\u308b\u6a5f\u5bc6\u30d5\u30a1\u30a4\u30eb\u304c\u5b58\u5728\u3059\u308b\u53ef\u80fd\u6027\u304c...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mzozk4pjvs2l"}, {"timestamp": "2026-11-07T04:50:14.902Z", "date_only": false, "value": "2026-11-07T04:50:14.902660Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mzp3vf5o2c2l", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "4eea4344-2bf8-409e-bbfc-f448f0fc7b73", "content": "\u30a2\u30c8\u30e9\u30b7\u30a2\u30f3\u306e\u30c7\u30fc\u30bf\u30bb\u30f3\u30bf\u30fc\u306e\u8106\u5f31\u6027\u304c\u516c\u8868\u3055\u308c\u3066\u304b\u3089\u308f\u305a\u304b2\u6642\u9593\u4ee5\u5185\u306b\u60aa\u7528\u3092\u8a66\u307f\u308b\u4e8b\u4f8b\u304c\u767a\u751f\n\n\u653b\u6483\u8005\u306f\u3001\u65b0\u305f\u306b\u660e\u3089\u304b\u306b\u306a\u3063\u305f\u30a2\u30c8\u30e9\u30b7\u30a2\u30f3\u30c7\u30fc\u30bf\u30bb\u30f3\u30bf\u30fc\u88fd\u54c1\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3092\u60aa\u7528\u3057\u59cb\u3081\u3066\u304a\u308a\u3001\u7279\u5b9a\u306e\u6761\u4ef6\u4e0b\u3067\u306f\u6a5f\u5bc6\u30d5\u30a1\u30a4\u30eb\u3078\u306e\u30a2\u30af\u30bb\u30b9\u304c\u53ef\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\nCVE-2026-21589 \uff08CVSS\u30b9\u30b3\u30a2\uff1a9.3\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u306f\u3001Bitbucket Data Center\u3001Confluence Data Center\u3001Jira Service Management Data Center\u3001Jira Software D...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mzp3vf5o2c2l"}, {"timestamp": "2026-11-07T05:13:29.454Z", "date_only": false, "value": "2026-11-07T05:13:29.454289Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mzp56w4v5c2l", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "7db9a569-e13d-4824-b5b2-b29cdded03cd", "content": "\u30cf\u30c3\u30ab\u30fc\u304c\u3001\u516c\u958b\u3055\u308c\u305f\u6982\u5ff5\u5b9f\u8a3c\uff08PoC\uff09\u30ea\u30ea\u30fc\u30b9\u5f8c\u306b\u30a2\u30c8\u30e9\u30b7\u30a2\u30f3\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u60aa\u7528\n\nJira\u3001Confluence\u3001Bitbucket\u306a\u3069\u3001\u8907\u6570\u306eAtlassian\u88fd\u54c1\u30d5\u30a1\u30df\u30ea\u30fc\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-21589\uff09\u304c\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3057\u306a\u3044\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\n\u672c\u65e5\u672a\u660e\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696dPrevidian\u306f\u3001\u8a73\u7d30\u306a\u6280\u8853\u5831\u544a\u66f8\u304c\u516c\u958b\u3055\u308c\u3066\u304b\u3089\u308f\u305a\u304b\u6570\u6642\u9593\u5f8c\u306b\u3001\u81ea\u793e\u306e\u30cf\u30cb\u30fc\u30dd\u30c3\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u4e0a\u3067\u3053\u306e\u6d3b\u52d5\u3092\u691c\u77e5\u3057\u305f\u3002\n\n\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u306e\u6b63\u78ba\u306a\u540d\u524d\u3068\u30d1\u30b9\u3092\u77e5\u3063\u3066\u3044\u308c\u3070\u3001CVE-2026-21589\u3092\u60aa\u7528\u3057\u3066\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306eWeb\u30eb\u30fc\u30c8\u30c7\u30a3\u30ec\u30af\u30c8...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mzp56w4v5c2l"}, {"timestamp": "2026-11-08T00:00:00Z", "date_only": false, "value": "2026-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-08)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "6226a6c2-dfca-4f5a-a11d-f8d589cb7a20", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-09T00:00:00Z", "date_only": false, "value": "2026-11-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-09)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "03864e7b-6e30-4f3a-a8f5-686aa973f045", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-10)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "2e30a4ae-29ac-47e9-b895-7327ad15caa4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-11T00:00:00Z", "date_only": false, "value": "2026-11-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-11)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "d30b2994-e3a6-4e7f-bc88-66dd56e20fb9", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-12T00:00:00Z", "date_only": false, "value": "2026-11-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-12)", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "bb58f7f5-7698-494f-9c4f-85cacf3c6817", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-12T00:00:00Z", "date_only": false, "value": "2026-11-12T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2026-21589", "field": "timestamps.last_seen_at", "uuid": "d38c3614-a79a-4e76-85d3-46090b01de06", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-12T00:00:00Z", "date_only": true, "value": "2026-11-12", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2026-21589", "field": "evidence.0.details.observation_date", "uuid": "d38c3614-a79a-4e76-85d3-46090b01de06", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-12T00:00:00Z", "date_only": false, "value": "2026-11-12T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2026-21589", "field": "status.status_updated_at", "uuid": "d38c3614-a79a-4e76-85d3-46090b01de06", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-14T01:00:01Z", "date_only": false, "value": "2026-11-14T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2026-21589", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "d38c3614-a79a-4e76-85d3-46090b01de06", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-14T06:35:48.012Z", "anchors": {"origin": {"timestamp": "2026-10-05T21:30:00.390Z", "date_only": false, "value": "2026-10-05T21:30:00.390Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-21589", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-05T21:30:00.390Z", "date_only": false, "value": "2026-10-05T21:30:00.390Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-21589", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-10-06T11:31:49.871Z", "date_only": false, "value": "2026-10-06T11:31:49.871000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "286d4f83-c688-4f99-b971-c1b1c0f71697", "url": "https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-10-06T21:55:50Z", "date_only": false, "value": "2026-10-06T21:55:50+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-21589", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ca794994-53b1-4f27-8263-ee62a3eb8e2c", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 87949.61, "hours": 24.430447222222224, "days": 1.017935300925926, "min_seconds": 87949.61, "max_seconds": 87949.61, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-05T21:30:00.390Z", "date_only": false, "value": "2026-10-05T21:30:00.390Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-21589", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-06T21:55:50Z", "date_only": false, "value": "2026-10-06T21:55:50+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-21589", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ca794994-53b1-4f27-8263-ee62a3eb8e2c", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 87949.61, "hours": 24.430447222222224, "days": 1.017935300925926, "min_seconds": 87949.61, "max_seconds": 87949.61, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-05T21:30:00.390Z", "date_only": false, "value": "2026-10-05T21:30:00.390Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-21589", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-06T21:55:50Z", "date_only": false, "value": "2026-10-06T21:55:50+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-21589", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ca794994-53b1-4f27-8263-ee62a3eb8e2c", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 50509.481, "hours": 14.030411388888888, "days": 0.584600474537037, "min_seconds": 50509.481, "max_seconds": 50509.481, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-05T21:30:00.390Z", "date_only": false, "value": "2026-10-05T21:30:00.390Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-21589", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-06T11:31:49.871Z", "date_only": false, "value": "2026-10-06T11:31:49.871000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "286d4f83-c688-4f99-b971-c1b1c0f71697", "url": "https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 3402347.622296, "hours": 945.0965617488889, "days": 39.3790234062037, "min_seconds": 3402347.622296, "max_seconds": 3402347.622296, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-05T21:30:00.390Z", "date_only": false, "value": "2026-10-05T21:30:00.390Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-21589", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T06:35:48.012Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 3314398.012296, "hours": 920.6661145266667, "days": 38.36108810527778, "min_seconds": 3314398.012296, "max_seconds": 3314398.012296, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-06T21:55:50Z", "date_only": false, "value": "2026-10-06T21:55:50+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-21589", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ca794994-53b1-4f27-8263-ee62a3eb8e2c", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-14T06:35:48.012Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 3351838.141296, "hours": 931.06615036, "days": 38.794422931666666, "min_seconds": 3351838.141296, "max_seconds": 3351838.141296, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-06T11:31:49.871Z", "date_only": false, "value": "2026-10-06T11:31:49.871000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589", "record": "CVE-2026-21589", "field": "creation_timestamp", "uuid": "286d4f83-c688-4f99-b971-c1b1c0f71697", "url": "https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T06:35:48.012Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}