{"total":1,"items":[{"id":1495,"title":"CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","original_title":"CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","source_rating":null,"summary":"Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attack","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21589","type":"kev","language":"en","published_at":"2026-10-15T00:00:00+00:00","severity":"hoog","priority":55,"vendors":["Atlassian"],"cves":[{"id":"CVE-2026-21589","cvss":9.3,"epss":0.02777,"epss_percentile":0.86118,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.3,"epss_max":0.02777,"source_count":2,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null}]}