ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Keywords match titles. Record type separates incidents, intel, and research from CVEs.

  1. Research · Oct 5, 2026 · ZeroDay Catalog

    Critical Vulnerability in Atlassian Products Allows Unauthenticated File Access

    A critical vulnerability has been identified in multiple Atlassian products, enabling unauthenticated access to sensitive files.

    What changed

    A critical vulnerability, identified as CVE-2026-21589, has been discovered in various Atlassian products. This flaw allows unauthenticated attackers to gain access to specific files within the web application root directory.

    The exploitation of this vulnerability requires prior knowledge of the exact file name and path, meaning attackers cannot enumerate or list directory contents.

    Who is affected

    Organizations utilizing the following Atlassian products are at risk due to this vulnerability:

    Affected products include Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible, and Fisheye.

    • Bitbucket Data Center
    • Confluence Data Center
    • Jira Service Management Data Center
    • Jira Software Data Center

    What to do

    It is crucial for organizations using the affected Atlassian products to assess their systems for exposure to this vulnerability. Immediate action should be taken to secure sensitive files.

    Regularly updating to the latest versions of the software and reviewing access controls can help mitigate the risks associated with this vulnerability.

    • Update to the latest versions of the affected Atlassian products.
    • Review and tighten access controls for sensitive files.
    • Monitor for any unusual access patterns that may indicate exploitation attempts.

    Original report

  2. Research · Sep 30, 2026 · ZeroDay Catalog

    Critical Vulnerabilities Identified in Zammad Session Management

    Zammad GmbH has reported critical session fixation and privilege management vulnerabilities, now acknowledged by CISA as actively exploited.

    What changed

    Zammad GmbH has disclosed two significant vulnerabilities in its Zammad product, specifically a session fixation vulnerability (CVE-2026-102489) and an improper privilege management vulnerability (CVE-2026-102490). These vulnerabilities have been added to CISA's Known Exploited Vulnerabilities Catalog due to evidence indicating active exploitation in the wild.

    • CVE-2026-102489: Session Fixation Vulnerability
    • CVE-2026-102490: Improper Privilege Management Vulnerability
    • Both vulnerabilities pose a risk of unauthorized access and privilege escalation.

    Who is affected

    Organizations utilizing Zammad for customer support and ticketing systems are at risk due to these vulnerabilities. The potential impact could compromise sensitive user data and system integrity.

    • Zammad GmbH's Zammad product users
    • Businesses relying on Zammad for customer service operations
    • IT departments managing Zammad installations
    • Any organization that integrates Zammad with other systems

    What to do

    Immediate action is recommended for all users of Zammad to mitigate the risks associated with these vulnerabilities. Organizations should prioritize updates and apply security patches as they become available.

    • Monitor CISA and Zammad's official channels for updates and patches.
    • Conduct a security audit of Zammad implementations to assess exposure.
    • Implement additional security measures, such as session management best practices.
    • Educate staff on the risks associated with session fixation and privilege management.

    Original report