/
initial_access_vector:exploit_public_facing × cves:CVE-2026-21589 × limpar

Resultados

2 casos · pág. 1/1

cisa.gov · high

CISA adds Atlassian CVE-2026-21589 file/directory exposure flaw to KEV catalog on evidence of active exploitation

CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-10-15, citing evidence of active exploitation: CVE-2026-21589, an Atlassian Multiple Products flaw in which files or directories are accessible to external parties. CISA describes this vulnerability type as a frequent attack vector for malicious cybe…

CVE-2026-21589 government
sentinelone.com · critical

Atlassian Data Center CVE-2026-21589 exploited within hours of PoC; BitB phishing targets AI ad portals; ShinyHunters member arrested

This SentinelOne weekly roundup (Week 41, 2026) covers law enforcement actions, a phishing campaign and an actively exploited vulnerability. The most urgent item is CVE-2026-21589, a critical (CVSS 9.3) unauthenticated arbitrary file access flaw in Atlassian Data Center products. Exploitation attempts began about two hours after a public …

CVE-2026-21589 ShinyHunters technology advertising