U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog
CISA added actively exploited Atlassian CVE-2026-21589 to KEV, ordering federal fixes by October 18, 2026.
86
Organization
watchTowr Labs
- Mentions · 7d0
- Mentions · 30d4
- All mentions10
- First seenAug 14, 2026
- Last mentioned14d ago
Timeline
10 articles · newest firstAtlassian Vulnerability Comes Under Attack Hours After Details Go Public
Attackers are exploiting critical Atlassian flaw CVE-2026-21589 to read sensitive files on Data Center products.
85
CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products
Atlassian patched CVE-2026-21589, an unauthenticated file-read flaw in eight products, with public proof-of-concept code available.
82
Citrix patches NetScaler SAML zero-day exploited in attacks
Citrix patched actively exploited NetScaler SAML zero-day CVE-2026-88779 after crashes and possible code execution.
88
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Mass exploitation of NetScaler CVE-2026-88772 grants attackers root access to deploy WHIPSHOT web shells and SLAPSHOT tunneler against government and financial targets.
88
NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)
Citrix NetScaler zero-day CVE-2026-88771 is under mass exploitation after a public proof of concept.
93
Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)
watchTowr dissects CVE-2026-88772, an in-the-wild-exploited pre-auth DTLS memory overflow in Citrix NetScaler enabling RCE, one of eight fixed flaws.
88
Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)
watchTowr details actively exploited unauthenticated heap overflow CVE-2026-94127 in F5 BIG-IP APM, enabling RCE via oversized Authorization headers.
88
GitLab’s critical flaw is already drawing internet-wide probes
GitLab patches two critical flaws (CVE-2026-85706 CVSS 10.0, CVE-2026-87719) as WatchTowr observes internet-wide probing of the unauthenticated file-read bug.
78
You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))
watchTowr Labs details a pre-authentication remote code execution flaw, tracked as CVE-2026-8452, in Citrix NetScaler appliances.
62
Related CVEs
by mentions- CVE-2026-8877278%9.5Unauthenticated RCE/DoS in Citrix NetScaler ADC and Gateway
- CVE-2026-8877182%9.5Unauthenticated RCE in Citrix NetScaler ADC and Gateway
- CVE-2026-2158999%9.3Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- CVE-2026-8570697%10.0Unauthenticated Path Traversal Arbitrary File Read in GitLab CE/EE
- CVE-2026-9412725%9.3Unauthenticated Heap-Overflow RCE in F5 BIG-IP APM with OAuth Profile
- CVE-2025-654310%9.2Memory Buffer Overflow in Citrix NetScaler ADC and Gateway Exploited in the Wild
- Authenticated GraphQL Subscription Flaw Leaks Search Credentials in GitLab EE
- CVE-2026-88775<1%8.8Memory Overflow in Citrix NetScaler ADC and Gateway
- Memory overflow in Citrix NetScaler ADC and Gateway
- Predictable-value flaw in Citrix NetScaler ADC and Gateway
Appears with
- Citrixorganization · 3
- Confluence Data Centerproduct · 3
- Fisheyeproduct · 3
- Bamboo Data Centerproduct · 3
- Bitbucket Data Centerproduct · 3
- Crucibleproduct · 3
- Citrixvendor · 3
- Atlassianvendor · 3
- CISAorganization · 3
- Crowd Data Centerproduct · 3
- Previdianorganization · 2
- NetScaler Gatewayproduct · 2
- Jira Service Management Data Centerproduct · 2
- Jira Software Data Centerproduct · 2
- NetScalerorganization · 2
- GreyNoiseorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.