Atlassian October bulletin covers 75 third-party product CVEs
Six unique flaws are rated critical, but Atlassian assesses non-critical customer risk and cites no exploitation.
52
Product
Confluence
- Mentions · 7d0
- Mentions · 30d14
- All mentions16
- First seenAug 26, 2026
- Last mentioned7d ago
Timeline
16 articles · newest firstAtlassian October bulletin lists 176 flaw entries in Jira and Confluence
Critical scores are third-party library ratings; Atlassian says its product risk is lower and not immediately critical.
58
October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero days
Microsoft's October Patch Tuesday fixes 1,407 CVEs, including an exploited Windows Shell Mark-of-the-Web bypass.
84
12th October – Threat Intelligence Report
Check Point's weekly report covers a Denmark registry breach of 8.8 million people, ransomware, and exploited enterprise flaws.
82
Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs round 599 collects weekly headlines on breaches, arrests, ransomware, and exploited flaws.
32
Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
Attackers probed critical Atlassian CVE-2026-21589 within hours of a public PoC, with 190 honeypot attempts.
80
Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)
Attackers are scanning Atlassian products for CVE-2026-21589, a traversal bug that can read web files.
72
PoC Exploit Released for Critical Atlassian Flaw That Can Lead to Jira Admin Access
watchTowr released a detection PoC for unauthenticated Atlassian file-read CVE-2026-21589 that can yield Jira admin access.
72
Hackers exploit critical Atlassian flaw after public PoC release
Attackers began exploiting critical Atlassian flaw CVE-2026-21589 within hours of a public proof of concept.
88
Hackers Steal Rockstar Source Code, 78.6 Million Records and Playable GTA VI Build
Lares links separate Rockstar intrusions to stolen source code, 78.6 million analytics records, and a leaked GTA VI build.
74
Rockstar Games Attacks Expose MFA Fatigue, OAuth Token Theft and Dev Pipeline Security Failures
Lares ties Rockstar breaches to MFA fatigue and stolen OAuth tokens, including a claimed 78.6-million-record Snowflake leak.
58
Atlassian and OpenAI expand partnership to turn enterprise knowledge into action
Atlassian and OpenAI will use GPT-6 models to power agents across Atlassian and Rovo.
74
Atlassian security advisory (AV26-1002)
Canada's Cyber Centre warns Atlassian server products are affected by arbitrary file access CVE-2026-21589.
60
Atlassian warns of critical file access flaw in its datacenter products
Atlassian urges patches for CVE-2026-21589, an unauthenticated file-read flaw in eight Data Center products.
76
Feral Wolf Hackers Exploit Confluence and 1C to Deploy GenieLocker Ransomware
Feral Wolf exploited Atlassian Confluence and 1C:Enterprise flaws to deploy GenieLocker ransomware across Russian retail, construction, manufacturing and IT firms.
58
FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure
FBI seizes China-linked QScan and QTRouter hacking platforms used by QTFY to obfuscate intrusions against US federal agencies.
78
Related CVEs
by mentions- CVE-2026-2158999%9.3Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- CVE-2026-65637<1%9.8Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990
- CVE-2026-58062<1%9.3In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate
- CVE-2026-75595<1%9.1Netty: Io.netty.handler.ssl.SslClientHelloHandler#decode checks the wrong offset before reading the four-byte TLS handshake header, so a…
- CVE-2026-68525<1%9.1Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access…
- CVE-2026-65182<1%9.1Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is…
- CVE-2021-403495%7.8Out-of-Bounds Read/Write Local Privilege Escalation in polkit pkexec (PwnKit)
- CVE-2026-65905<1%9.8Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator
- Critical Authentication Bypass in Apache MINA SSHD (Asynchronous Auth Flaw)
- CVE-2023-240592%7.3Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023
Appears with
- Atlassianvendor · 15
- Bitbucketproduct · 11
- Bambooproduct · 8
- Crowdproduct · 7
- Jiraproduct · 7
- Atlassianorganization · 6
- Jira Service Managementproduct · 6
- Fisheyeproduct · 5
- Jira Softwareproduct · 5
- Crucibleproduct · 5
- watchTowrorganization · 4
- ShinyHuntersthreat actor · 3
- Fortinetvendor · 3
- Citrixvendor · 3
- Snowflakeproduct · 2
- Slackproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.