Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)
2026-10-07T20:51:40Z•30a4260bb567223bb73b65753b704b15b3639cd492cdffff8916be93e7a8f973
CVE-2026-21589AI securityAtlassianDNS hijackingData CenterFortiBleedFortinet FortiGateSSL VPNactive exploitationarbitrary file accesscredential abusedomain hijackingfirewall compromisephishing responseproof of conceptunauthorized TLS certificates
What happened
Help Net Security reports active exploitation attempts against the critical Atlassian Data Center arbitrary file access vulnerability CVE-2026-21589 shortly after patches and a public proof of concept became available. The feed also covers an ongoing FortiBleed campaign targeting internet-facing Fortinet FortiGate firewalls and SSL VPN gateways, reportedly compromising tens of thousands of devices and locking administrators out. Additional items discuss AI security and resilience products, phishing response automation, endpoint threat hunting, and hijacked country-code domain registries usedтo
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 30a4260bb567223bb73b65753b704b15b3639cd492cdffff8916be93e7a8f973
- Enrichment time
- 2026-10-07T20:51:40Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.