MSRXMSRXSecurity
Vendors / Atlassian

Atlassian vulnerabilities being exploited

1 Atlassian flaw was confirmed exploited in the wild in the past 365 days, across 1 product: Multiple Products. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-10-15CVE-2026-21589 Multiple Products
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions.

2026-10-18
Watch my Atlassian softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.