Hackers exploit critical Atlassian flaw after public PoC release
Teaser from the source
A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputer →Linked advisories
- CVE-2026-21589Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Schwachstelle ermöglicht Offenlegung von Informationen
- CVE-2026-21589h3.
- CVE-2026-21589Security Advisory 2026-015 — Critical Vulnerability in Multiple Atlassian Products
- CVE-2026-21589Sicherheitsluecke -- CVE-2026-21589
More on PoC
Other advisories
- osv:MAL-2026-17711highMalicious code in wix-reg-poc-bypass (npm)
- osv:CVE-2026-105833noneEspoCRM before 10.0.5 IDOR via PersonalAccount Service Exposes IMAP Passwords
- CVE-2026-105833noneIn EspoCRM vor 10.
- osv:CVE-2026-105832noneEspoCRM before 10.0.6 Two-Factor Authentication Bypass on Unauthenticated Routes
- CVE-2026-105832noneIn EspoCRM vor 10.
- CVE-2026-105831noneIn EspoCRM vor 10.
- osv:CVE-2026-105831noneEspoCRM before 10.0.6 Unauthenticated Stored HTML Injection via Lead Capture Form
- osv:MAL-2026-17654highMalicious code in abbishal-poc2 (npm)
Other news entries
- Newssecurityweek2026-10-08Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
- Newstheregister-security2026-10-08Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead
- Newsthehackernews2026-10-01Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path
- Newsthehackernews2026-09-22Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
- Newsbleepingcomputer2026-09-22D-Link warns of max severity zero-day bug in DIR-822A routers
- Newstheregister-security2026-09-15The vulnpocalypse rains iBugs down on Apple with record-setting number of patches
- Newsthehackernews2026-09-09Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed
- Newssecurityweek2026-09-07Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits
ID