CISA adds Atlassian CVE-2026-21589 file/directory exposure flaw to KEV catalog on evidence of active exploitation
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-10-15, citing evidence of active exploitation: CVE-2026-21589, an Atlassian Multiple Products flaw in which files or directories are accessible to external parties. CISA describes this vulnerability type as a frequent attack vector for malicious cybe…