{"schema":"vulnpedia.poc/1","cve":"CVE-2026-21589","generated":"2026-10-26T13:52:32.101Z","kev":{"since":"2026-10-15","ransomware":false},"epss":{"score":0.99477,"percentile":0.99943},"cvss":{"version":"4.0","score":9.3,"severity":"CRITICAL","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/966813b9dc55","executable":false,"sourceId":"966813b9dc55","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"966813b9dc55","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/966813b9dc55"}],"repositoryUrl":"https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/2739faa497e3","executable":false,"sourceId":"2739faa497e3","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"2739faa497e3","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/2739faa497e3"}],"repositoryUrl":"https://github.com/MarcusProgram/CVE-2026-21589"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/5818e155dcdd","executable":false,"sourceId":"5818e155dcdd","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5818e155dcdd","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/5818e155dcdd"}],"repositoryUrl":"https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/96f9a17d1b13","executable":false,"sourceId":"96f9a17d1b13","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"96f9a17d1b13","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/96f9a17d1b13"}],"repositoryUrl":"https://github.com/aduli198/CVE-2026-21589"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/46cc1659236e","executable":false,"sourceId":"46cc1659236e","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"46cc1659236e","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/46cc1659236e"}],"repositoryUrl":"https://github.com/ynsmroztas/AtlasSniper"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/9f37f10ae8f8","executable":false,"sourceId":"9f37f10ae8f8","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9f37f10ae8f8","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/9f37f10ae8f8"}],"repositoryUrl":"https://github.com/0xBlackash/CVE-2026-21589"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/a2b0f3c67602","executable":false,"sourceId":"a2b0f3c67602","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a2b0f3c67602","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/a2b0f3c67602"}],"repositoryUrl":"https://github.com/rxsklife/CVE-2026-21589"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/8bea00a45699","executable":false,"sourceId":"8bea00a45699","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8bea00a45699","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/8bea00a45699"}],"repositoryUrl":"https://github.com/murrez/CVE-2026-21589"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/ba7e55bd983e","executable":false,"sourceId":"ba7e55bd983e","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ba7e55bd983e","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/ba7e55bd983e"}],"repositoryUrl":"https://github.com/gotr00t0day/CVE-2026-21589"}],"detection_sources":[{"kind":"nuclei","template":"http/cves/2026/CVE-2026-21589.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21589.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-21589%22&type=repositories","executable":false}],"poc_candidates":[{"url":"https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-17T21:26:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-17T21:26:36Z","url":"https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/MarcusProgram/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-20T16:49:50Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/MarcusProgram/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-20T16:49:50Z","url":"https://github.com/MarcusProgram/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"CVE-2026-21589 - Atlassian Data Center Unauth Arbitrary File Read (CVSS 9.3). Red/Blue Team suite with 2 tools: Full Exploit (path traversal, WEB-INF read, interactive shell, 8 products, mass scan, SOCKS5/Tor, stealth) and SafeChecker (non-intrusive version audit, WAF detection, IoC guidance, JSON/CSV/JSONL reports). Use Ethically, Stay Legal.","modified":"2026-10-22T18:23:48Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-22T18:23:48Z","url":"https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit"}],"tags":[]},{"url":"https://github.com/aduli198/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"Atlassian Arbitrary File Read","modified":"2026-10-07T09:12:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/aduli198/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-07T09:12:37Z","url":"https://github.com/aduli198/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/BimBoxH4/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-07T13:46:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/BimBoxH4/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-07T13:46:04Z","url":"https://github.com/BimBoxH4/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"CVE-2026-21589","modified":"2026-10-07T16:02:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/0xBlackash/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-07T16:02:20Z","url":"https://github.com/0xBlackash/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/ynsmroztas/AtlasSniper","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"CVE-2026-21589 detector for Atlassian Data Center webresource traversal. Pre-auth webroot file read confirm for Jira, Confluence and Bitbucket.","modified":"2026-10-20T16:49:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/ynsmroztas/AtlasSniper"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-20T16:49:51Z","url":"https://github.com/ynsmroztas/AtlasSniper"}],"tags":[]},{"url":"https://github.com/rxsklife/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"CVE-2026-21589 is a critical (CVSS 9.3) arbitrary file access vulnerability affecting all versions of eight Atlassian Data Center products, including Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible, Fisheye, and Jira Service Management.","modified":"2026-10-14T05:53:01Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/rxsklife/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-14T05:53:01Z","url":"https://github.com/rxsklife/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/murrez/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"CVE-2026-21589 — Atlassian DC pre-auth arbitrary file read (CVSS 4.0 9.3). PoCbit PoC: atlassian-plugins-webresource ..:: traversal on /download/resources/ for Jira, Confluence, Bitbucket. check + exploit (WEB-INF/web.xml, crowd.properties). Batch JSONL, hits.txt. Not RCE. https://pocbit.org/pocs/cve-2026-21589","modified":"2026-10-08T09:00:07Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/murrez/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-08T09:00:07Z","url":"https://github.com/murrez/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/renzi25031469/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"Atlassian Data Center Multiple Products - Arbitrary File Access (Path Traversal)","modified":"2026-10-08T15:33:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/renzi25031469/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-08T15:33:37Z","url":"https://github.com/renzi25031469/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/gotr00t0day/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"Atlassian Arbitrary File Read","modified":"2026-10-12T15:59:22Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/gotr00t0day/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-12T15:59:22Z","url":"https://github.com/gotr00t0day/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/webserverdude/f5_CVE-2026-21589_mitigation","source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-10T12:49:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/webserverdude/f5_CVE-2026-21589_mitigation"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-10T12:49:17Z","url":"https://github.com/webserverdude/f5_CVE-2026-21589_mitigation"}],"tags":[]},{"url":"https://github.com/CompleTetech-Security/atlassian-cve-2026-21589-check","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"Offline Atlassian Data Center evidence checker for CVE-2026-21589. Self-managed product and version evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.","modified":"2026-10-26T05:12:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/CompleTetech-Security/atlassian-cve-2026-21589-check"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-26T05:12:43Z","url":"https://github.com/CompleTetech-Security/atlassian-cve-2026-21589-check"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-21589 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-21589/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}]}