https://vulnerability.circl.lu/sightings/feed 2026-10-08T13:47:27.350689+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4caec4b8-9629-4825-8e61-b18251437af3/export 2026-10-08T13:47:27.378098+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4caec4b8-9629-4825-8e61-b18251437af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxei733mrc24", "content": "Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)\n\nOn October 5th, Atlassian published patches&#;x26;#;xc2;&#;x26;#;xa0;for multiple products to fix an \"Arbitrary File Access\" vulnerability &#;x26;#;x5b;CVE-2026-21589&#;x26;#;x5d;. An attacker can read arbitrary fi\u2026\n#hackernews #news", "creation_timestamp": "2026-10-08T12:40:41.743557Z"} 2026-10-08T12:40:41.743557+00:00 https://vulnerability.circl.lu/sighting/f38224d0-7c67-4fa4-b0fb-405e5bc658aa/export 2026-10-08T13:47:27.381545+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f38224d0-7c67-4fa4-b0fb-405e5bc658aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxehmp7aoc24", "content": "Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)\n\nOne day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products, and a few hours after watchTowr researchers \u2026\n#hackernews #news", "creation_timestamp": "2026-10-08T12:30:25.496227Z"} 2026-10-08T12:30:25.496227+00:00 https://vulnerability.circl.lu/sighting/ae003db6-c06a-4c62-93bf-f7d35525913c/export 2026-10-08T13:47:27.381928+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ae003db6-c06a-4c62-93bf-f7d35525913c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxea5ss2hz2i", "content": "\u8907\u6570\u306eAtlassian\u88fd\u54c1\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u5b9f\u74b0\u5883\u3067\u60aa\u7528\u3055\u308c\u308b\n\nAtlassian Data Center\u88fd\u54c1\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u3001\u5b9f\u74b0\u5883\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u5831\u3058\u3089\u308c\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-21589\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u307e\u3059\u3002Atlassian\u306f10\u67085\u65e5\u4ed8\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3067\u3001\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u306b\u30a2\u30af\u30bb\u30b9\u3055\u308c\u308b\u8106\u5f31\u6027\u3068\u8aac\u660e\u3057\u307e\u3057\u305f\u3002\u6df1\u523b\u5ea6\u3092\u793a\u3059C", "creation_timestamp": "2026-10-08T10:16:49.638384Z"} 2026-10-08T10:16:49.638384+00:00 https://vulnerability.circl.lu/sighting/92027c9d-3e98-46db-bcd3-f24b01cc024b/export 2026-10-08T13:47:27.382227+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "92027c9d-3e98-46db-bcd3-f24b01cc024b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://t.me/GithubRedTeam/104645", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-21589\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-08 09:00:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-21589 \u2014 Atlassian DC pre-auth arbitrary file read (CVSS 4.0 9.3). PoCbit PoC: atlassian-plugins-webresource ..:: traversal on /download/resources/ for Jira, Confluence, Bitbucket. check + exploit (WEB-INF/web.xml, crowd.properties). Batch JSONL, hits.txt. Not RCE. https://pocbit.org/pocs/cve-2026-21589\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-08T09:02:54.000000Z"} 2026-10-08T09:02:54+00:00 https://vulnerability.circl.lu/sighting/71d967a9-f0d8-4daa-a461-ba9f8af485e2/export 2026-10-08T13:47:27.382514+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "71d967a9-f0d8-4daa-a461-ba9f8af485e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104645", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-21589\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-08 09:00:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-21589 \u2014 Atlassian DC pre-auth arbitrary file read (CVSS 4.0 9.3). PoCbit PoC: atlassian-plugins-webresource ..:: traversal on /download/resources/ for Jira, Confluence, Bitbucket. check + exploit (WEB-INF/web.xml, crowd.properties). Batch JSONL, hits.txt. Not RCE. https://pocbit.org/pocs/cve-2026-21589\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-08T09:02:54.000000Z"} 2026-10-08T09:02:54+00:00 https://vulnerability.circl.lu/sighting/8f2a1fe9-badf-4942-9f70-a3305161601e/export 2026-10-08T13:47:27.382775+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8f2a1fe9-badf-4942-9f70-a3305161601e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxe2ripzes2o", "content": "Atlassian Data Center CVE-2026-21589 (CVSS 9.3): file read pre-auth via path traversal ('::' \u2192 '/'), sfruttato ~2h dopo la PoC watchTowr. Colpiti Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible, Fisheye. #infosec", "creation_timestamp": "2026-10-08T08:40:27.945826Z"} 2026-10-08T08:40:27.945826+00:00 https://vulnerability.circl.lu/sighting/c816409b-c43a-4be3-bad3-65dc86d91751/export 2026-10-08T13:47:27.383022+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c816409b-c43a-4be3-bad3-65dc86d91751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxe2riphsc2o", "content": "Atlassian Data Center CVE-2026-21589 (CVSS 9.3): file read pre-auth via path traversal ('::' \u2192 '/'), sfruttato ~2h dopo la PoC watchTowr. Colpiti Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible, Fisheye. #infosec", "creation_timestamp": "2026-10-08T08:40:27.491675Z"} 2026-10-08T08:40:27.491675+00:00 https://vulnerability.circl.lu/sighting/7db64f05-c479-4be8-b3c8-2528777c4463/export 2026-10-08T13:47:27.383262+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7db64f05-c479-4be8-b3c8-2528777c4463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxdzrstnnk24", "content": "Hackers exploit critical Atlassian flaw after public PoC release\n\nA critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. [...]\n#hackernews #news", "creation_timestamp": "2026-10-08T08:22:44.124028Z"} 2026-10-08T08:22:44.124028+00:00 https://vulnerability.circl.lu/sighting/e1821dc4-f6c6-48f4-8a9d-8cbc20a2ccd5/export 2026-10-08T13:47:27.383373+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e1821dc4-f6c6-48f4-8a9d-8cbc20a2ccd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-949430a4-087921198d66a9a6", "content": "Threat actors are exploiting CVE-2026-21589, a critical Atlassian flaw that can expose sensitive files across multiple Data Center products. Threat actors have started exploiting CVE-2026-21589 (CVSS score of 9.3), a critical arbitrary file access flaw in Atlassian Data Center products. The vulnerability could allow attackers to access sensitive files under certain conditions. Affected products include [\u2026]Atlassian Vulnerability Comes Under Attack Hours After Details Go Public", "creation_timestamp": "2026-10-08T08:15:32.718293Z"} 2026-10-08T08:15:32.718293+00:00 https://vulnerability.circl.lu/sighting/a6c84c97-906b-49bf-a307-c949e991d660/export 2026-10-08T13:47:27.383486+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a6c84c97-906b-49bf-a307-c949e991d660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxdzeqfgm2z2", "content": "Threat actors are exploiting CVE-2026-21589, a critical Atlassian flaw that can expose sensitive files across multiple Data Center products. Threat actors have started exploiting CVE-2026-21589 (CVSS score of 9.3), a critical arbitrary file access flaw in Atlassian Data Center products. The [\u2026]", "creation_timestamp": "2026-10-08T08:15:28.608985Z"} 2026-10-08T08:15:28.608985+00:00