// day
Oct 15, 2026
2 new incidents, 1 with updates.
## started
- highlivepatchedsince Oct 15, 2026
Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
› Atlassian Multiple Products
Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions. Added to CISA KEV on 2026-10-15.
CVE-2026-21589 - criticalclosedpatchedclosed Oct 16, 2026
Rank Math PRO WordPress plugin download backdoored
› Rank Math PRO (WordPress)
SEO plugin vendor Rank Math confirmed attackers tampered with PRO version 3.0.123 on the official download site, planting hidden backdoors during an ~11-hour window. Sites that installed that build should audit and rebuild.
