CVE-2026-21589 Atlassian Bamboo Data Center
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an…
- CVSS
- 9.3 Critical
- EPSS
- 100%
- Percentile
- 100
- Published
- 2026-10-05
- Force
- 10 of 12
- Public PoC
- 13
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H
On CISA’s exploited list
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- Added
- 2026-10-15
- Federal patch deadline
- 2026-10-18
- Ransomware use
- not known