A critical vulnerability (CVE-2026-21589) in eight Atlassian Data Center products allows unauthenticated attackers to read specific files from the web application root directory. Atlassian rated the flaw 9.3 out of 10 and has released fixed
The Clop ransomware group has migrated its data leak site after the ShinyHunters gang exploited a Grav CMS path traversal flaw to breach its server.
Threat actors are actively exploiting a critical path traversal vulnerability in GitLab, allowing unauthenticated users to access arbitrary files on affected servers.
