HighCVECVE-2026-21589
[CVE-2026-21589] Atlassian Multiple Products — Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
CISA KEV·Source published ·1 min read
What happened?
Multiple Atlassian products (Bitbucket Data Center,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions.
Key details
- Citrix NetScaler ADC and Gateway have a memory buffer restriction flaw.
- The vulnerability could enable remote code execution or denial of service.
- Forensic triage is required under Binding Operational Directive 26-04.
- Citrix provides mitigation guidance and forensic triage steps.
Affected
- Citrix NetScaler ADC and NetScaler Gateway are affected.
Fixes and mitigations
- Apply mitigations per vendor instructions and BOD 26-04 guidance.
- Follow Citrix published guidance for mitigations and forensic steps.
What to look for
- IOCs provided by Citrix can be run in the NetScaler console.
Summarised by SecOraLens from CISA KEV. Always read the original source before acting. How SecOraLens verifies advisories.