← Incidents
INCIDENT 944Exploited vulnerabilityLOW / UNDER REVIEWSourced
CVE-2026-21589 added to CISA KEV: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
<p>CISA has added one new vulnerability to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation.</p> <ul type="disc"> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-21589" target="_blank"><u>CVE-2026-21589</u></a> Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability </li> </ul> <p>This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.</p> <p>…
Last evidence update
16 OCT 2026 · 12:00 UTC
Source count
4
Status
reported
GovernmentCVE-2026-21589CVE-2025-61624CVE-2026-102764
Observation history
How this record has evolved as evidence accumulated.
16 OCT · 05:00 UTC
Initial report
16 OCT · 05:00 UTC
Second independent source
16 OCT · 05:00 UTC
Summary updated from new evidence
17 OCT · 05:00 UTC
Second independent source
17 OCT · 05:00 UTC
Related CVE identified (CVE-2025-61624)
17 OCT · 05:00 UTC
Second independent source
17 OCT · 05:00 UTC
Related CVE identified (CVE-2026-102764)
Evidence
CISA KEV · high
CVE-2026-21589 added to CISA KEV: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
CISA · high
CISA Adds One Known Exploited Vulnerability to Catalog
CISA KEV · high
CVE-2025-61624 added to CISA KEV: Fortinet Multiple Products Path Traversal Vulnerability
CISA · high
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Related incidents