CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Atlassian Data Center Arbitrary File Access Vulnerability Advisory (CVE-2026-21589)
[Affected Scope] Wide range of Atlassian Data Center products including Bitbucket, Confluence, Jira, Bamboo, and Crowd.
[Impact] Unauthenticated remote attackers can access sensitive files within the web application root directory, leading to information disclosure.
[Mitigation] Immediately upgrade to the fixed versions provided by Atlassian and restrict access to sensitive web root files.
Output Messenger Directory Traversal and Arbitrary File Access Vulnerability (CVE-2025-27920) Security Advisory
[Affected Scope] Output Messenger versions prior to 2.0.63
[Impact] Authenticated attackers can leverage directory traversal sequences ('../') to access sensitive configuration files and arbitrary system files, potentially leading to remote code execution (RCE)
[Mitigation] Immediately upgrade Output Messenger to the latest secure version (2.0.63 or higher) and restrict network access