Intelligence online17 sources monitored15 actively exploited 7d27 published 24hChecked recently
Product

Multiple Products

Made by Atlassian. 1 of its vulnerabilities are known to have been exploited.

Coverage

CriticalAct nowExploitedCISA KEV

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability (CVE-2026-21589) is being actively exploited, CISA warns

CISA added CVE-2026-21589 (Atlassian Multiple Products) to its Known Exploited Vulnerabilities catalog on October 15, 2026, which means there is reliable evidence of exploitation in the wild. Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or…

Why it matters

CISA lists this as exploited in the wild. Unpatched Confluence & Jira systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited VulnerabilitiesEnterpriseDevelopers

Recent intelligence

The latest developments from the last 30 days, newest first.

  1. AdvisoryKEV

    Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability (CVE-2026-21589) is being actively exploited, CISA warns

    Basis: CISA Known Exploited Vulnerabilities (government advisory)

  2. Added to CISA KEVUpdateCVE-2026-21589

    CVE-2026-21589 added to CISA KEV: Atlassian Multiple Products, Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

    Basis: CISA Known Exploited Vulnerabilities catalog

Actively exploited

CVE-2026-21589CVSS 9.3

Atlassian Multiple Products

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

Added Oct 15, 2026Fed. due Oct 18, 2026Coverage →