{"total":6,"items":[{"id":1495,"title":"CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","original_title":"CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","source_rating":null,"summary":"Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attack","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21589","type":"kev","language":"en","published_at":"2026-10-15T00:00:00+00:00","severity":"hoog","priority":55,"vendors":["Atlassian"],"cves":[{"id":"CVE-2026-21589","cvss":9.3,"epss":0.02777,"epss_percentile":0.86118,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.3,"epss_max":0.02777,"source_count":2,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":853,"title":"2026-015: Critical Vulnerability in Multiple Atlassian Products","original_title":"2026-015: Critical Vulnerability in Multiple Atlassian Products","source_rating":null,"summary":"On 5 October 2026, Atlassian published a security advisory addressing a critical arbitrary file access vulnerability. It affects Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye.\n\nCERT-EU strongly r","ai":false,"actions":[],"url":"https://cert.europa.eu/publications/security-advisories/2026-015/","type":"advisory","language":"en","published_at":"2026-10-07T09:52:48+00:00","severity":"laag","priority":15,"vendors":["Atlassian"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"cert-eu","name":"CERT-EU Security Advisories","category":"overheid","country":"EU","license":"CC BY 4.0, samengevat en vertaald door Seinwacht","reuse":"open"},"bundle":null},{"id":865,"title":"Warning: Critical, unauthenticated path traversal in Atlassian (Bitbucket, Jira, Confluence, Bamboo, Crowd) Data Centre, Cricible, Fisheye, Patch Immediately!","original_title":"Warning: Critical, unauthenticated path traversal in Atlassian (Bitbucket, Jira, Confluence, Bamboo, Crowd) Data Centre, Cricible, Fisheye, Patch Immediately!","source_rating":null,"summary":"","ai":false,"actions":[],"url":"https://ccb.belgium.be/advisories/warning-critical-unauthenticated-path-traversal-atlassian-bitbucket-jira-confluence","type":"advisory","language":"en","published_at":"2026-10-07T07:15:09+00:00","severity":"laag","priority":20,"vendors":["Atlassian"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"ccb-be","name":"CCB / Safeonweb@work (België)","category":"overheid","country":"BE","license":"© CCB, hergebruik voorbehouden","reuse":"link"},"bundle":null},{"id":847,"title":"Kwetsbaarheid verholpen in Atlassian Data Center producten","original_title":"Kwetsbaarheid verholpen in Atlassian Data Center producten","source_rating":null,"summary":"De kwetsbaarheid bevindt zich in meerdere producten binnen het Atlassian Data Center-platform, waaronder Jira Software, Jira Service Management, Confluence, Bitbucket, Bamboo, Crowd, Crucible en Fisheye. De kwetsbaarheid betreft een Arbitrary File Access-probleem waarmee ongeauthenticeerde aanvallers specifieke bestand","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0402","type":"advisory","language":"nl","published_at":"2026-10-06T16:47:26+00:00","severity":"middel","priority":25,"vendors":["Atlassian"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":{"kans":"M","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":822,"title":"[UPDATE] [hoog] Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye en Jira): Kwetsbaarheid maakt openbaarmaking van informatie mogelijk","original_title":"[UPDATE] [hoch] Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Schwachstelle ermöglicht Offenlegung von Informationen","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3755","type":"advisory","language":"de","published_at":"2026-10-06T12:11:15+00:00","severity":"middel","priority":32,"vendors":["Atlassian"],"cves":[{"id":"CVE-2026-21589","cvss":9.3,"epss":0.02777,"epss_percentile":0.86118,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.3,"epss_max":0.02777,"source_count":2,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":687,"title":"[UPDATE] [hoog] Atlassian Bamboo, Bitbucket, Confluence, Fisheye/Crucible, Jira Software en Jira Service Management: Meerdere kwetsbaarheden","original_title":"[UPDATE] [hoch] Atlassian Bamboo, Bitbucket, Confluence, Fisheye/Crucible, Jira Software und Jira Service Management: Mehrere Schwachstellen","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3376","type":"advisory","language":"de","published_at":"2026-10-05T10:17:09+00:00","severity":"middel","priority":25,"vendors":["Atlassian"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null}]}