Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM (Broken Authentication & Session Management) vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perform actions as another user. Atlassian recommends that Crowd Data Center customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Crowd Data Center 7.2: Upgrade to a release greater than or equal to 7.2.2 See the release notes (https://confluence.atlassian.com/crowd/crowd-release-notes-199094.html). You can download the latest version of Crowd Data Center from the download center (https://www.atlassian.com/software/crowd/download-archive). This vulnerability was reported via our Penetration Testing program.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-21582 This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. Th… https://www.cve.org/CVERecord?id=CVE-2026-21582
Post summary
A high‑severity broken authentication vulnerability, CVE‑2026‑21582, has been disclosed for Crowd Data Center version 7.2.1, with a reference to the CVE record.
🚨*CVE* CVE-2026-21582 This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. Th… https://www.cve.org/CVERecord?id=CVE-2026-21582 ----- Traducción: CVE-2026-21582 Esta … https://infoflow.cloud`
Post summary
A tweet announces the new high‑severity Broken Authentication & Session Management vulnerability CVE‑2026‑21582 in Crowd Data Center 7.2.1, with a link to the official CVE record.