{"schema":"vulnpedia.research/1","cve":"CVE-2026-21589","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://jira.atlassian.com/browse/BAM-26567","tags":["Issue Tracking","Mitigation","Vendor Advisory"],"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","origins":[{"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","url":"https://jira.atlassian.com/browse/BAM-26567"},{"source":"nvd","sourceId":"CVE-2026-21589","modified":"2026-10-19T20:31:57.050","url":"https://jira.atlassian.com/browse/BAM-26567"}]},{"url":"https://jira.atlassian.com/browse/BSERV-20604","tags":["Issue Tracking","Mitigation","Vendor Advisory"],"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","origins":[{"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","url":"https://jira.atlassian.com/browse/BSERV-20604"},{"source":"nvd","sourceId":"CVE-2026-21589","modified":"2026-10-19T20:31:57.050","url":"https://jira.atlassian.com/browse/BSERV-20604"}]},{"url":"https://jira.atlassian.com/browse/CONFSERVER-104488","tags":["Issue Tracking","Mitigation","Vendor Advisory"],"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","origins":[{"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","url":"https://jira.atlassian.com/browse/CONFSERVER-104488"},{"source":"nvd","sourceId":"CVE-2026-21589","modified":"2026-10-19T20:31:57.050","url":"https://jira.atlassian.com/browse/CONFSERVER-104488"}]},{"url":"https://jira.atlassian.com/browse/CRUC-8741","tags":["Issue Tracking","Mitigation","Vendor Advisory"],"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","origins":[{"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","url":"https://jira.atlassian.com/browse/CRUC-8741"},{"source":"nvd","sourceId":"CVE-2026-21589","modified":"2026-10-19T20:31:57.050","url":"https://jira.atlassian.com/browse/CRUC-8741"}]},{"url":"https://jira.atlassian.com/browse/CWD-6610","tags":["Issue Tracking","Mitigation","Vendor Advisory"],"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","origins":[{"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","url":"https://jira.atlassian.com/browse/CWD-6610"},{"source":"nvd","sourceId":"CVE-2026-21589","modified":"2026-10-19T20:31:57.050","url":"https://jira.atlassian.com/browse/CWD-6610"}]},{"url":"https://jira.atlassian.com/browse/FE-7583","tags":["Issue Tracking","Mitigation","Vendor Advisory"],"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","origins":[{"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","url":"https://jira.atlassian.com/browse/FE-7583"},{"source":"nvd","sourceId":"CVE-2026-21589","modified":"2026-10-19T20:31:57.050","url":"https://jira.atlassian.com/browse/FE-7583"}]},{"url":"https://jira.atlassian.com/browse/JRASERVER-79546","tags":["Issue Tracking","Mitigation","Vendor Advisory"],"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","origins":[{"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","url":"https://jira.atlassian.com/browse/JRASERVER-79546"},{"source":"nvd","sourceId":"CVE-2026-21589","modified":"2026-10-19T20:31:57.050","url":"https://jira.atlassian.com/browse/JRASERVER-79546"}]},{"url":"https://jira.atlassian.com/browse/JSDSERVER-16809","tags":["Issue Tracking","Mitigation","Vendor Advisory"],"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","origins":[{"source":"mitre","sourceId":"atlassian","modified":"2026-10-19T18:26:40.891Z","url":"https://jira.atlassian.com/browse/JSDSERVER-16809"},{"source":"nvd","sourceId":"CVE-2026-21589","modified":"2026-10-19T20:31:57.050","url":"https://jira.atlassian.com/browse/JSDSERVER-16809"}]},{"url":"https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589","tags":["exploit","Third Party Advisory","XDB repository"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-16T03:56:40.891Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-16T03:56:40.891Z","url":"https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589"},{"source":"nvd","sourceId":"CVE-2026-21589","modified":"2026-10-19T20:31:57.050","url":"https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589"},{"source":"vulncheck-kev","sourceId":"966813b9dc55","modified":"2026-10-07T00:00:00Z","url":"https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21589","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-16T03:56:40.891Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-16T03:56:40.891Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21589"},{"source":"nvd","sourceId":"CVE-2026-21589","modified":"2026-10-19T20:31:57.050","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21589"}]},{"source":"euvd","sourceId":"EUVD-2026-92807","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92807","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-92807","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92807"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://previdian.com/CVE-2026-21589","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","url":"https://previdian.com/CVE-2026-21589"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-21589&date=2026-10-22","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-21589&date=2026-10-22"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-22&host_type=src&vulnerability=cve-2026-21589","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-22&host_type=src&vulnerability=cve-2026-21589"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-23&host_type=src&vulnerability=cve-2026-21589","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-23&host_type=src&vulnerability=cve-2026-21589"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-24&host_type=src&vulnerability=cve-2026-21589","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-24&host_type=src&vulnerability=cve-2026-21589"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-21589&date=2026-10-25","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-21589&date=2026-10-25"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-25&host_type=src&vulnerability=cve-2026-21589","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-25&host_type=src&vulnerability=cve-2026-21589"}]},{"url":"https://vulncheck.com/xdb/966813b9dc55","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"966813b9dc55","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"966813b9dc55","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/966813b9dc55"}]},{"url":"https://vulncheck.com/xdb/2739faa497e3","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"2739faa497e3","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"2739faa497e3","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/2739faa497e3"}]},{"url":"https://github.com/MarcusProgram/CVE-2026-21589","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"2739faa497e3","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"2739faa497e3","modified":"2026-10-07T00:00:00Z","url":"https://github.com/MarcusProgram/CVE-2026-21589"}]},{"url":"https://vulncheck.com/xdb/5818e155dcdd","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"5818e155dcdd","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5818e155dcdd","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/5818e155dcdd"}]},{"url":"https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"5818e155dcdd","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5818e155dcdd","modified":"2026-10-07T00:00:00Z","url":"https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit"}]},{"url":"https://vulncheck.com/xdb/96f9a17d1b13","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"96f9a17d1b13","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"96f9a17d1b13","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/96f9a17d1b13"}]},{"url":"https://github.com/aduli198/CVE-2026-21589","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"96f9a17d1b13","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"96f9a17d1b13","modified":"2026-10-07T00:00:00Z","url":"https://github.com/aduli198/CVE-2026-21589"}]},{"url":"https://vulncheck.com/xdb/46cc1659236e","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"46cc1659236e","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"46cc1659236e","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/46cc1659236e"}]},{"url":"https://github.com/ynsmroztas/AtlasSniper","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"46cc1659236e","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"46cc1659236e","modified":"2026-10-07T00:00:00Z","url":"https://github.com/ynsmroztas/AtlasSniper"}]},{"url":"https://vulncheck.com/xdb/9f37f10ae8f8","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"9f37f10ae8f8","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9f37f10ae8f8","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/9f37f10ae8f8"}]},{"url":"https://github.com/0xBlackash/CVE-2026-21589","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"9f37f10ae8f8","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9f37f10ae8f8","modified":"2026-10-07T00:00:00Z","url":"https://github.com/0xBlackash/CVE-2026-21589"}]},{"url":"https://vulncheck.com/xdb/a2b0f3c67602","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"a2b0f3c67602","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a2b0f3c67602","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/a2b0f3c67602"}]},{"url":"https://github.com/rxsklife/CVE-2026-21589","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"a2b0f3c67602","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a2b0f3c67602","modified":"2026-10-07T00:00:00Z","url":"https://github.com/rxsklife/CVE-2026-21589"}]},{"url":"https://vulncheck.com/xdb/8bea00a45699","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"8bea00a45699","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8bea00a45699","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/8bea00a45699"}]},{"url":"https://github.com/murrez/CVE-2026-21589","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"8bea00a45699","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8bea00a45699","modified":"2026-10-07T00:00:00Z","url":"https://github.com/murrez/CVE-2026-21589"}]},{"url":"https://vulncheck.com/xdb/ba7e55bd983e","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"ba7e55bd983e","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ba7e55bd983e","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/ba7e55bd983e"}]},{"url":"https://github.com/gotr00t0day/CVE-2026-21589","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"ba7e55bd983e","modified":"2026-10-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ba7e55bd983e","modified":"2026-10-07T00:00:00Z","url":"https://github.com/gotr00t0day/CVE-2026-21589"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-17T21:26:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-17T21:26:36Z","url":"https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/MarcusProgram/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-20T16:49:50Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/MarcusProgram/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-20T16:49:50Z","url":"https://github.com/MarcusProgram/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"CVE-2026-21589 - Atlassian Data Center Unauth Arbitrary File Read (CVSS 9.3). Red/Blue Team suite with 2 tools: Full Exploit (path traversal, WEB-INF read, interactive shell, 8 products, mass scan, SOCKS5/Tor, stealth) and SafeChecker (non-intrusive version audit, WAF detection, IoC guidance, JSON/CSV/JSONL reports). Use Ethically, Stay Legal.","modified":"2026-10-22T18:23:48Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-22T18:23:48Z","url":"https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit"}],"tags":[]},{"url":"https://github.com/aduli198/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"Atlassian Arbitrary File Read","modified":"2026-10-07T09:12:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/aduli198/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-07T09:12:37Z","url":"https://github.com/aduli198/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/BimBoxH4/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-07T13:46:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/BimBoxH4/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-07T13:46:04Z","url":"https://github.com/BimBoxH4/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"CVE-2026-21589","modified":"2026-10-07T16:02:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/0xBlackash/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-07T16:02:20Z","url":"https://github.com/0xBlackash/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/ynsmroztas/AtlasSniper","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"CVE-2026-21589 detector for Atlassian Data Center webresource traversal. Pre-auth webroot file read confirm for Jira, Confluence and Bitbucket.","modified":"2026-10-20T16:49:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/ynsmroztas/AtlasSniper"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-20T16:49:51Z","url":"https://github.com/ynsmroztas/AtlasSniper"}],"tags":[]},{"url":"https://github.com/rxsklife/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"CVE-2026-21589 is a critical (CVSS 9.3) arbitrary file access vulnerability affecting all versions of eight Atlassian Data Center products, including Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible, Fisheye, and Jira Service Management.","modified":"2026-10-14T05:53:01Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/rxsklife/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-14T05:53:01Z","url":"https://github.com/rxsklife/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/murrez/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"CVE-2026-21589 — Atlassian DC pre-auth arbitrary file read (CVSS 4.0 9.3). PoCbit PoC: atlassian-plugins-webresource ..:: traversal on /download/resources/ for Jira, Confluence, Bitbucket. check + exploit (WEB-INF/web.xml, crowd.properties). Batch JSONL, hits.txt. Not RCE. https://pocbit.org/pocs/cve-2026-21589","modified":"2026-10-08T09:00:07Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/murrez/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-08T09:00:07Z","url":"https://github.com/murrez/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/renzi25031469/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"Atlassian Data Center Multiple Products - Arbitrary File Access (Path Traversal)","modified":"2026-10-08T15:33:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/renzi25031469/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-08T15:33:37Z","url":"https://github.com/renzi25031469/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/gotr00t0day/CVE-2026-21589","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"Atlassian Arbitrary File Read","modified":"2026-10-12T15:59:22Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/gotr00t0day/CVE-2026-21589"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-12T15:59:22Z","url":"https://github.com/gotr00t0day/CVE-2026-21589"}],"tags":[]},{"url":"https://github.com/webserverdude/f5_CVE-2026-21589_mitigation","source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-10T12:49:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/webserverdude/f5_CVE-2026-21589_mitigation"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-10T12:49:17Z","url":"https://github.com/webserverdude/f5_CVE-2026-21589_mitigation"}],"tags":[]},{"url":"https://github.com/CompleTetech-Security/atlassian-cve-2026-21589-check","source":"poc-in-github","sourceId":"CVE-2026-21589","description":"Offline Atlassian Data Center evidence checker for CVE-2026-21589. Self-managed product and version evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.","modified":"2026-10-26T05:12:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-21589","url":"https://github.com/CompleTetech-Security/atlassian-cve-2026-21589-check"},{"source":"poc-in-github","sourceId":"CVE-2026-21589","modified":"2026-10-26T05:12:43Z","url":"https://github.com/CompleTetech-Security/atlassian-cve-2026-21589-check"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"966813b9dc55","url":"https://vulncheck.com/xdb/966813b9dc55","cve":"CVE-2026-21589","dateAdded":"2026-10-06T10:40:59Z","modified":"2026-10-07T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589","observations":[{"dateAdded":"2026-10-06T10:40:59Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"966813b9dc55","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/966813b9dc55"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"2739faa497e3","url":"https://vulncheck.com/xdb/2739faa497e3","cve":"CVE-2026-21589","dateAdded":"2026-10-06T15:43:34Z","modified":"2026-10-07T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/MarcusProgram/CVE-2026-21589","observations":[{"dateAdded":"2026-10-06T15:43:34Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"2739faa497e3","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/2739faa497e3"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"5818e155dcdd","url":"https://vulncheck.com/xdb/5818e155dcdd","cve":"CVE-2026-21589","dateAdded":"2026-10-07T02:05:14Z","modified":"2026-10-07T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit","observations":[{"dateAdded":"2026-10-07T02:05:14Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"5818e155dcdd","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/5818e155dcdd"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"96f9a17d1b13","url":"https://vulncheck.com/xdb/96f9a17d1b13","cve":"CVE-2026-21589","dateAdded":"2026-10-07T09:03:00Z","modified":"2026-10-07T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/aduli198/CVE-2026-21589","observations":[{"dateAdded":"2026-10-07T09:03:00Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"96f9a17d1b13","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/96f9a17d1b13"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"46cc1659236e","url":"https://vulncheck.com/xdb/46cc1659236e","cve":"CVE-2026-21589","dateAdded":"2026-10-07T18:14:03Z","modified":"2026-10-07T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/ynsmroztas/AtlasSniper","observations":[{"dateAdded":"2026-10-07T18:14:03Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"46cc1659236e","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/46cc1659236e"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"9f37f10ae8f8","url":"https://vulncheck.com/xdb/9f37f10ae8f8","cve":"CVE-2026-21589","dateAdded":"2026-10-07T21:03:44Z","modified":"2026-10-07T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/0xBlackash/CVE-2026-21589","observations":[{"dateAdded":"2026-10-07T21:03:44Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"9f37f10ae8f8","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/9f37f10ae8f8"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"a2b0f3c67602","url":"https://vulncheck.com/xdb/a2b0f3c67602","cve":"CVE-2026-21589","dateAdded":"2026-10-08T05:41:15Z","modified":"2026-10-07T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/rxsklife/CVE-2026-21589","observations":[{"dateAdded":"2026-10-08T05:41:15Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"a2b0f3c67602","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/a2b0f3c67602"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"8bea00a45699","url":"https://vulncheck.com/xdb/8bea00a45699","cve":"CVE-2026-21589","dateAdded":"2026-10-08T15:06:53Z","modified":"2026-10-07T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/murrez/CVE-2026-21589","observations":[{"dateAdded":"2026-10-08T15:06:53Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"8bea00a45699","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/8bea00a45699"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"ba7e55bd983e","url":"https://vulncheck.com/xdb/ba7e55bd983e","cve":"CVE-2026-21589","dateAdded":"2026-10-09T19:15:01Z","modified":"2026-10-07T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/gotr00t0day/CVE-2026-21589","observations":[{"dateAdded":"2026-10-09T19:15:01Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"ba7e55bd983e","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/xdb/ba7e55bd983e"}]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-10-07T00:00:00Z","modified":"2026-10-07T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":true,"vendorProject":"Atlassian","product":"Multiple Products","dueDate":"2026-10-18T00:00:00Z","cisaDateAdded":"2026-10-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","modified":"2026-10-07T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","catalog":"VulnCheck KEV","kind":"report","url":"https://previdian.com/CVE-2026-21589","dateAdded":"2026-10-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","url":"https://previdian.com/CVE-2026-21589"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2026-10-15T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-21589&date=2026-10-22","dateAdded":"2026-10-22T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-21589&date=2026-10-22"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-22&host_type=src&vulnerability=cve-2026-21589","dateAdded":"2026-10-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-22&host_type=src&vulnerability=cve-2026-21589"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-23&host_type=src&vulnerability=cve-2026-21589","dateAdded":"2026-10-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-23&host_type=src&vulnerability=cve-2026-21589"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-24&host_type=src&vulnerability=cve-2026-21589","dateAdded":"2026-10-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-24&host_type=src&vulnerability=cve-2026-21589"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-21589&date=2026-10-25","dateAdded":"2026-10-25T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-21589&date=2026-10-25"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-25&host_type=src&vulnerability=cve-2026-21589","dateAdded":"2026-10-25T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-21589","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-25&host_type=src&vulnerability=cve-2026-21589"}]}]}