Vulnerability in Atlassian Bamboo Data Center
CVSS Skor
9.3
EPSS İhtimal
%2.8
Risk Skoru
0.3
Yayın
9 gün önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
webserverdude/f5_CVE-2026-21589_mitigation
Atlassian Data Center Multiple Products - Arbitrary File Access (Path Traversal)
CVE-2026-21589 — Atlassian DC pre-auth arbitrary file read (CVSS 4.0 9.3). PoCbit PoC: atlassian-plugins-webresource ..:: traversal on /download/resources/ for Jira, Confluence, Bitbucket. check + exploit (WEB-INF/web.xml, crowd.properties). Batch JSONL, hits.txt. Not RCE. https://pocbit.org/pocs/cve-2026-21589
CVE-2026-21589 is a critical (CVSS 9.3) arbitrary file access vulnerability affecting all versions of eight Atlassian Data Center products, including Jira, Confluence, Bitbucket, Bamboo, Crowd, Crucible, Fisheye, and Jira Service Management.
CVE-2026-21589 - Atlassian Data Center Unauth Arbitrary File Read (CVSS 9.3). Red/Blue Team suite with 2 tools: Full Exploit (path traversal, WEB-INF read, interactive shell, 8 products, mass scan, SOCKS5/Tor, stealth) and SafeChecker (non-intrusive version audit, WAF detection, IoC guidance, JSON/CSV/JSONL reports). Use Ethically, Stay Legal.
Nuclei: Atlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File Read
CVE-2026-21589 detector for Atlassian Data Center webresource traversal. Pre-auth webroot file read confirm for Jira, Confluence and Bitbucket.
watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589
İlgili Benzer Açıklar
OS command injection in Atlassian Bamboo
Code injection in Atlassian Bamboo
Code injection in Atlassian Sourcetree
Vulnerability in Atlassian Confluence Data Center
Vulnerability in Atlassian Crowd Data Center
Vulnerability in Atlassian Confluence Data Center
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-21589"