{"id":"CVE-2026-21589","url":"https://compromised.live/t/CVE-2026-21589","kind":"exploited_vuln","tier":2,"severity":"high","title":"Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","summary":"An unauthenticated attacker can access files inside the web application's root directory without logging in, and this flaw is being actively exploited. Atlassian Data Center products: Bitbucket, Confluence, Jira Service Management, Jira Software, Bamboo, Crowd, Crucible and Fisheye. Apply the vendor's update now and check for signs of compromise.","summary_source":"ai","affected":[],"epss":null,"kev":{"date_added":"2026-10-15","due_date":"2026-10-18","ransomware":false},"first_seen":"2026-11-03T21:55:44.095Z","updated_at":"2026-11-03T21:55:44.095Z","status":"active","details":"Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions.","aliases":["CVE-2026-21589"],"sources":[{"name":"kev","id":"CVE-2026-21589","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21589"}]}