Hackers exploit critical Atlassian flaw after public PoC release Source: BleepingComputer A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. […] Read original
Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details Source: The Hacker News Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including Read original
Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details Source: The Hacker News Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including Read original
Ninja Forms plugin flaw exploited to hack WordPress sites Source: BleepingComputer Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue admin accounts. […] Read original
Atlassian warns of critical file-access flaw in Jira, Confluence Source: BleepingComputer Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket. […] Read original
Rejetto HFS servers now actively scanned for critical RCE flaw Source: BleepingComputer Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). […] Read original
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes Source: The Hacker News Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system. “Weak authorization Read original
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes Source: The Hacker News Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system. “Weak authorization Read original
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes Source: The Hacker News Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system. “Weak authorization Read original
New Dell System Update flaw lets hackers gain root privileges Source: BleepingComputer Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible. […] Read original