U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog
In early October, threat actors started exploiting CVE-2026-21589, a critical arbitrary file access flaw in Atlassian Data Center products. Affected products include Bitbucket, Confluence, Jira Service Management, Jira Software, Bamboo, Crowd, Crucible, and Fisheye. Check vendor advisories and update affected products.
Sources
Story so far
- Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks – BleepingComputer
first report, exploited in attacks - Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation – The Hacker News
patch / fix released - Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix – CSO Online
added to CISA KEV - CVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW) – Palo Alto Networks PSIRT
new CVE: CVE-2026-0317 - CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM) – Palo Alto Networks PSIRT
new CVE: CVE-2026-0321 - CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM) – Palo Alto Networks PSIRT
new CVE: CVE-2026-0320 - CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH) – Palo Alto Networks PSIRT
- U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog – Security Affairs
- U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog – Security Affairs
new CVE: CVE-2026-21589 - Here’s What Telegram Giving Data to the U.S. Government Looks Like – 404 Media
Fact-checked against the sources above before publishing. AI-assisted script, synthetic voice, human-approved. Found an error? Tell us.
