Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
Lead record- Why these records are connected
- Records explicitly naming the same CVE identifier.
- Connection key
cve:CVE-2026-21589- Public snapshot refreshed
- today 17:32 UTC
- Distinct source events
- 3
- Source records represented
- 3
Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.
Evidence in chronological order
- Mon 5 Oct · Dated source evidence · Security advisory Jira Service Management Data Center: Arbitrary File Access (CVE-2026-21589)Atlassian security advisories Source: Atlassian security advisories · source check: today 12:09 UTCYour review: not selected in your watchlist or stack; no review is inferred.The vendor rates it critical
- Mon 12 Oct · Dated source evidence · Security advisory WAF - WAF Release - 2026-10-12Cloudflare WAF changelog Source: Cloudflare WAF changelog · source check: today 15:24 UTCYour review: not selected in your watchlist or stack; no review is inferred.Release notes name CVE-2026-102989, CVE-2026-21589
- Thu 15 Oct · Dated source evidence · Atlassian · exploited, added to CISA KEV Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityCVE-2026-21589 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.CISA lists it as exploited