VulnSocial

CVE-2026-21584Disclosure(atlassian / bamboo)

LOWCVSS 8.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.6, allows an authenticated attacker to gain unintended access and can lead to the exposure of resources or functionality, possibly providing attackers with sensitive information or even execute arbitrary code. Atlassian recommends that Bamboo Data Center customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: * Bamboo Data Center 10.2: Upgrade to a release greater than or equal to 10.2.22 * Bamboo Data Center 12.1: Upgrade to a release greater than or equal to 12.1.10 See the release notes (https://confluence.atlassian.com/bambooreleases/bamboo-release-notes-1189793869.html). You can download the latest version of Bamboo Data Center from the download center (https://www.atlassian.com/software/bamboo/download-archives). This vulnerability was reported via our Penetration Testing program.

atlassian CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-285

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • bamboo

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
atlassian
Products
bamboo

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-08-18: 2Technical Details · 2026-08-18: 208-18
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-21584 This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This … https://www.cve.org/CVERecord?id=CVE-2026-21584 ----- Traducción: CVE-2026-21584 Esta … https://infoflow.cloud`

    Post summary

    The tweet announces CVE-2026-21584, a high‑severity improper‑authorization flaw affecting several Bamboo Data Center versions, linking to the CVE record but providing no evidence of active exploitation, patches, or PoC.

    0000028
    100 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-21584 This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This … https://www.cve.org/CVERecord?id=CVE-2026-21584

    Post summary

    The text announces a High severity Improper Authorization vulnerability (CVE-2026-21584) affecting multiple Bamboo Data Center releases, with no further details on PoC, active exploitation, patches, or false positive claims.

    000001.4K
    58.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appatlassianbamboo---

Explore more

Back to dashboardatlassian CVEsbamboo vulnerabilities