CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operationa

Back to dashboard

Threat ModerateSingle SourceAgencyConf ConfirmedUnited States · North AmericaPublishedCERT

Original publisher

CERT

Original source URL

https://www.cisa.gov/news-events/alerts/2026/10/15/cisa-adds-one-known-exploited-vulnerability-catalog

Source country

United States

Reporting region

North America

Language

Institution

CISA US-CERT

Published (UTC)

Oct 15, 2026, 12:00 PM

Ingested (UTC)

Oct 16, 2026, 3:02 PM

Verification

Single Source

BASE INTEL aggregates public reporting. This item is not authored by BASE INTEL. Always review the original publisher before relying on the content.

CISA Adds One Known Exploited Vulnerability to Catalog
Advisory ID: node-25637
CISA has added one new vulnerability to its  Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability  This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operationa
Severity: moderate
Published (UTC): 2026-10-15T12:00:00.000Z
Source: CERT
Original source: https://www.cisa.gov/news-events/alerts/2026/10/15/cisa-adds-one-known-exploited-vulnerability-catalog

View original source

Related reports on this event

Separate source reports grouped by topic. Conflicting claims remain distinct.

Threat ModerateSingle SourceAgency

Cyber

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-88779 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Op

certadvisorynode-25583

CERTUnited States · North America

Oct 4, 2026, 12:00 PM UTC