{"revision":"b713d23ea9d349fca8fdcc21dd21761d","evidence":{"cve":"CVE-2026-21589","kev":{"cve":"CVE-2026-21589","product":"Multiple Products","name":"Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","dateAdded":"2026-10-15","dueDate":"2026-10-18","knownRansomwareUse":false,"shortDescription":"Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions.","vendor":"Atlassian","isMicrosoft":false,"products":["atlassian"],"advisoryUrl":"https://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html?ref=labs.watchtowr.com","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21589","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21589"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"175e98861d1ee5e6abc36d9d"}}