SBOMs missed scope of a Shai-Hulud supply-chain compromise
A stale SBOM called a SaaS environment clean while a hidden transitive dependency had already run.
52
Vendor
Atlassian
- Mentions · 7d1
- Mentions · 30d37
- All mentions46
- First seenAug 17, 2026
- Last mentioned3d ago
Timeline
46 articles · newest firstAtlassian October bulletin covers 75 third-party product CVEs
Six unique flaws are rated critical, but Atlassian assesses non-critical customer risk and cites no exploitation.
52
Canada flags Atlassian Data Center and Server flaws (AV26-1076)
The October 22 alert lists affected Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira, and Jira Service Management builds.
46
Atlassian October bulletin lists 176 flaw entries in Jira and Confluence
Critical scores are third-party library ratings; Atlassian says its product risk is lower and not immediately critical.
58
U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog
CISA added actively exploited Atlassian CVE-2026-21589 to KEV, ordering federal fixes by October 18, 2026.
86
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited Atlassian flaw CVE-2026-21589, which exposes files to external parties, to the KEV catalog.
76
CISA lists Atlassian file-access flaw CVE-2026-21589 as exploited
Unauthenticated attackers can read a known file in the web root; federal remediation is due October 18, 2026.
78
October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero days
Microsoft's October Patch Tuesday fixes 1,407 CVEs, including an exploited Windows Shell Mark-of-the-Web bypass.
84
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
Attackers exploited critical Atlassian flaw CVE-2026-21589 within hours, alongside arrests, malware updates, and certificate hijacks.
82
12th October – Threat Intelligence Report
Check Point's weekly report covers a Denmark registry breach of 8.8 million people, ransomware, and exploited enterprise flaws.
82
Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
Employees are linking personal AI agents to corporate apps through OAuth, passwords, and API tokens, creating unmanaged identity risk.
46
Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs round 599 collects weekly headlines on breaches, arrests, ransomware, and exploited flaws.
32
Week in review: FortiBleed is still active, Patch Tuesday forecast
CISA added an exploited NetScaler flaw to KEV as Atlassian, Exchange, and SonicWall patches landed amid active attacks.
76
Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
Attackers probed critical Atlassian CVE-2026-21589 within hours of a public PoC, with 190 honeypot attempts.
80
Critical Flaw in Multiple Atlassian Products Exploited in the Wild
Unauthenticated Atlassian flaw CVE-2026-21589 is exploited in the wild to read Data Center application files.
80
Atlassian Vulnerability Comes Under Attack Hours After Details Go Public
Attackers are exploiting critical Atlassian flaw CVE-2026-21589 to read sensitive files on Data Center products.
85
CVE-2026-21589: Critical Arbitrary File Read Vulnerability in Atlassian Products
Akamai details CVE-2026-21589, a critical arbitrary file read flaw in Atlassian products.
Akamai Blog64
Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)
Attackers are scanning Atlassian products for CVE-2026-21589, a traversal bug that can read web files.
72
Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)
Attackers are probing Atlassian Data Center products for critical file-read flaw CVE-2026-21589 one day after patches.
85
PoC Exploit Released for Critical Atlassian Flaw That Can Lead to Jira Admin Access
watchTowr released a detection PoC for unauthenticated Atlassian file-read CVE-2026-21589 that can yield Jira admin access.
72
CVE-2026-21589: Critical Atlassian File Access
Atlassian disclosed CVE-2026-21589, a critical unauthenticated file-access flaw in eight self-hosted products.
72
Hackers exploit critical Atlassian flaw after public PoC release
Attackers began exploiting critical Atlassian flaw CVE-2026-21589 within hours of a public proof of concept.
88
CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products
Atlassian patched CVE-2026-21589, an unauthenticated file-read flaw in eight products, with public proof-of-concept code available.
82
Hackers Steal Rockstar Source Code, 78.6 Million Records and Playable GTA VI Build
Lares links separate Rockstar intrusions to stolen source code, 78.6 million analytics records, and a leaked GTA VI build.
74
Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details
Unauthenticated Atlassian Data Center flaw CVE-2026-21589 saw exploitation attempts within two hours.
83
Atlassian Patches Critical Vulnerability Affecting 8 Products
Atlassian patched unauthenticated file-read flaw CVE-2026-21589 in eight products, and no exploitation has been observed.
77
Atlassian’s critical flaw turns eight enterprise products into one big security problem
Unauthenticated CVE-2026-21589 lets attackers read web-root files on eight Atlassian Data Center products; exploitation is unconfirmed.
78
CVE-2026-21589 | Atlassian Data Center Products Unauthenticated Arbitrary File Read Vulnerability
Atlassian Data Center products have critical unauthenticated file-read flaw CVE-2026-21589, with no known exploitation.
71
Atlassian warns of critical file-access flaw in Jira, Confluence
Atlassian warns CVE-2026-21589 allows unauthenticated file access in self-hosted Jira, Confluence, Bitbucket, and other Data Center products.
66
You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)
Atlassian patched CVE-2026-21589, a pre-auth arbitrary file read affecting Jira, Confluence, Bitbucket, and other Data Center products.
84
Atlassian and OpenAI expand partnership to turn enterprise knowledge into action
Atlassian and OpenAI will use GPT-6 models to power agents across Atlassian and Rovo.
74
Atlassian security advisory (AV26-1002)
Canada's Cyber Centre warns Atlassian server products are affected by arbitrary file access CVE-2026-21589.
60
Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)
Atlassian warns unauthenticated attackers can read files on Data Center products via critical CVE-2026-21589.
76
Atlassian Patches Critical Vulnerabilities in Jira, Confluence, Bitbucket, and Five More Products
Atlassian patched CVE-2026-21589, a CVSS 9.3 unauthenticated file-access flaw in eight Data Center products.
76
Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center
Atlassian CVE-2026-21589 lets unauthenticated attackers read known files in Jira and Confluence Data Center.
72
Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
CVE-2026-21589 lets unauthenticated attackers read known files in eight self-hosted Atlassian Data Center products.
76
Atlassian warns of critical file access flaw in its datacenter products
Atlassian urges patches for CVE-2026-21589, an unauthenticated file-read flaw in eight Data Center products.
76
SpaceXAI Releases Grok Voice Transcribe 2.0: A Speech-to-Text API Claiming 2x Accuracy Over 1.0 at $0.10 per Hour
SpaceXAI released Grok Voice Transcribe 2.0, a speech-to-text API claiming 2x accuracy over 1.0 at unchanged $0.10-$0.20 per hour pricing.
45
Grok Voice Transcribe 2.0
xAI releases Grok Voice Transcribe 2.0, claiming top streaming transcription accuracy, twice v1.0's accuracy at unchanged pricing.
45
Feral Wolf Ransomware Attacks Exploit Atlassian Confluence and Misconfigured 1C Systems
BI.ZONE links Feral Wolf ransomware attacks on Russian firms to Confluence CVE-2023-22515 exploitation and exposed 1C clusters, deploying GenieLocker.
58
Related CVEs
by mentions- CVE-2026-2158999%9.3Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- CVE-2023-2251599%9.8Unauthenticated Broken Access Control in Atlassian Confluence Data Center/Server
- CVE-2022-26134100%9.8Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center
- CVE-2026-8877911%8.7Unauthenticated denial of service in NetScaler ADC and Gateway
- CVE-2026-65637<1%9.8Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990
- CVE-2026-58062<1%9.3In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate
- CVE-2026-68525<1%9.1Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access…
- CVE-2026-75595<1%9.1Netty: Io.netty.handler.ssl.SslClientHelloHandler#decode checks the wrong offset before reading the four-byte TLS handshake header, so a…
- CVE-2026-65182<1%9.1Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is…
- CVE-2026-969403%8.8Weak authorization privilege escalation in Microsoft Exchange Server
Appears with
- Crucibleproduct · 21
- Fisheyeproduct · 21
- Confluence Data Centerproduct · 17
- Crowd Data Centerproduct · 16
- Atlassianorganization · 16
- Jira Software Data Centerproduct · 16
- Bitbucket Data Centerproduct · 16
- Bamboo Data Centerproduct · 16
- Jira Service Management Data Centerproduct · 15
- Confluenceproduct · 15
- Bitbucketproduct · 11
- watchTowrorganization · 10
- CISAorganization · 9
- Bambooproduct · 8
- Previdianorganization · 7
- Crowdproduct · 7
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.