CyberSIXT Search
Atlassian product

Bamboo Data Center

← All Atlassian products

No Bamboo Data Center CVE is in the CISA KEV catalogue.

Tracked since 6 Oct · latest article Mon 19 Oct · RSS

High exploit odds · current
0
high · not in KEV

Exploited, by due date

CSV download

No Bamboo Data Center CVE is in the CISA KEV catalogue.

Coverage

15 articles · all timeFull timeline →

15 articles from 8 outlets since 6 Oct; the latest 7 days ago.

Bamboo Data Center: coverage over time15 articles from 8 outlets. First report 6 Oct by SecurityOnline. Busiest day: 5 articles, 7 Oct. 0 in the last 7 days. Bamboo Data Center: coverage over time15 articles from 8 outlets. First report 6 Oct by SecurityOnline. Busiest day: 5 articles, 7 Oct. 0 in the last 7 days.
  • Article
  • First report
  • Official notice
Show as table
Bamboo Data Center: articles
Published (UTC)OutletHeadline
Mon 19 Oct · 01:44 UTCSecurityOnlineActively Exploited Flaws Hit Cisco, BeyondTrust and WordPress Plugin
Fri 16 Oct · 11:31 UTCSecurity AffairsCISA Warns Atlassian Data Center Flaw Is Under Active Attack
Thu 15 Oct · 18:02 UTCCISACISA Flags Critical Atlassian Flaw Letting Attackers Access Files
Mon 12 Oct · 16:47 UTCThe Hacker NewsAttackers Exploit Atlassian Flaw Just Two Hours After Details Emerge
Mon 12 Oct · 04:02 UTCSecurityOnlineSix Actively Exploited Flaws Remain Outside CISA’s KEV Catalog
Thu 8 Oct · 14:40 UTCSecurityWeekAttackers Target Atlassian Flaw Hours After PoC Details Emerge
Thu 8 Oct · 10:25 UTCInfosecurityHackers Exploit Critical Atlassian Flaw to Steal Sensitive Files
Thu 8 Oct · 08:36 UTCSecurity AffairsHackers Exploit Critical Atlassian Flaw to Steal Restricted Files
Wed 7 Oct · 16:59 UTCSANS ISCAtlassian Patches Flaw Letting Attackers Read Web App Files
Wed 7 Oct · 13:17 UTCRapid7Atlassian Flaw Lets Unauthenticated Attackers Read Web Root Files
Wed 7 Oct · 12:38 UTCThe Hacker NewsAttackers Exploited Critical Atlassian Flaw Within Two Hours of Disclosure
Wed 7 Oct · 09:00 UTCSecurityOnlineHackers Exploit Atlassian File Read Flaw in Self Managed Servers
Wed 7 Oct · 06:48 UTCSecurityWeekAtlassian Patches Critical File Access Flaw Across Eight Products
Tue 6 Oct · 07:46 UTCThe Hacker NewsAtlassian warns of critical flaw exposing files in self-hosted products
Tue 6 Oct · 03:47 UTCSecurityOnlineAtlassian Patches Critical Flaw Exposing Files Across Data Center Products

Who reported 8 outlets, last 12 months

  • SecurityOnline4
  • The Hacker News3
  • SecurityWeek2
  • Security Affairs2
  • SANS ISC1
  • Rapid71
  • Infosecurity1
  • CISA1
See the full timeline
  1. Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress PluginSecurityOnline
  2. CISA Warns Atlassian Data Center Flaw Is Under Active AttackSecurity Affairs
  3. CISA Flags Critical Atlassian Flaw Letting Attackers Access FilesCISA · official notice
  4. Attackers Exploit Atlassian Flaw Just Two Hours After Details EmergeThe Hacker News
  5. Six Actively Exploited Flaws Remain Outside CISA’s KEV CatalogSecurityOnline
  6. Attackers Target Atlassian Flaw Hours After PoC Details EmergeSecurityWeek
  7. Hackers Exploit Critical Atlassian Flaw to Steal Sensitive FilesInfosecurity
  8. Hackers Exploit Critical Atlassian Flaw to Steal Restricted FilesSecurity Affairs
  9. Atlassian Patches Flaw Letting Attackers Read Web App FilesSANS ISC
  10. Atlassian Flaw Lets Unauthenticated Attackers Read Web Root FilesRapid7

All CVEs in coverage

1
CVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityCVSS9.3CriticalExploited99.4%EPSS15articles
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device