CVE-2026-21589

💠 CVE-2026-21589 — Acceso Arbitrario a Archivos Pre-Autenticación en Atlassian Acceso Arbitrario a Archivos No Autenticado mediante Path Traversal Investigación de seguridad y análisis técnico de CVE-2026-21589 que afecta a múltiples productos de Atlassian Data Center. Descripción General...

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 CVSS score: 9.3 affects multiple products, including...

The vulnerability of Atlassian Data Center software products lies in the use of files and directories accessible from external parties, which allows attackers to gain unauthorized access to protected information.

The vulnerability of Atlassian Data Center software lies in the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Exploit for CVE-2026-21589

CVE-2026-21589 - Atlassian Data Center Una...

Vulnerability handling in Atlassian Data Center products

The vulnerability exists in several products within the Atlassian Data Center platform, including Jira Software, Jira Service Management, Confluence, Bitbucket, Bamboo, Crowd, Crucible, and Fisheye. The vulnerability is an Arbitrary File Access issue, allowing unauthorized attackers to access...

CVE-2022-26134

CVE-2022-26134 El 30 de mayo de 2022, una organización llamada Volexity identificó una vulnerabilidad de RCE sin autenticación con una puntuación de 9.8 en NIST en las ediciones Confluence Server y Data Center de Atlassian versión vulnerable 7.18.1 Ejecutar python -m venv venv source...

RCE (Remote Code Execution) in - CVE-2022-1471

h2. Summary of Vulnerability Multiple Atlassian Data Center and Server Products use the SnakeYAML library for Java, which is susceptible to a deserialization flaw that can lead to RCE Remote Code Execution. i Atlassian Cloud sites are not affected by this vulnerability. If your site is accessed...

Exploit for Missing Authorization in Atlassian Data_Center

CVE-2020-36287 The dashboard gadgets preference resource of th...

Jira Server and Data Center affected by Tomcat CVE-2021-25329 and CVE-2021-25122

Affected versions of Atlassian Jira Server and Data Center used versions of Apache Tomcat that were vulnerable to CVE-2021-25329|https://nvd.nist.gov/vuln/detail/CVE-2021-25329 and CVE-2021-25122|https://nvd.nist.gov/vuln/detail/CVE-2021-25122. The affected versions are before version 8.17.0. ...

CVE-2019-15001

The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 before 7.13.8, from 8.0.0 before 8.1.3, from 8.2.0 before 8.2.5, from 8.3.0 before 8.3.4 and from 8.4.0 before 8.4.1 allows remote attackers with Administrator permissions to gain...