cscli appsec-rules install crowdsecurity/vpatch-CVE-2026-21589This rule provides virtual patching for CVE-2026-21589, an Arbitrary File Read vulnerability in Bamboo Data Center (Atlassian), published on 2026-10-05, with a CVSS score of 9.3 (Critical).
Detection: Detects Atlassian arbitrary file read attempts using traversal through web resource download routes.
Virtual patching mitigates exploitation attempts, but it does not fix the underlying vulnerability: upgrading Bamboo Data Center to a patched version is always recommended.
1## autogenerated on 2026-10-07 09:05:142name: crowdsecurity/vpatch-CVE-2026-215893description: 'Detects Atlassian arbitrary file read attempts using traversal through web resource download routes.'4rules:5 - and:6 - zones:7 - URI8 transform:9 - urldecode10 - lowercase11 match:12 type: contains13 value: '/download/resources/'14 - zones:15 - URI16 transform:17 - urldecode18 - lowercase19 match:20 type: contains21 value: '..::'2223labels:24 type: exploit25 service: http26 confidence: 327 spoofable: 028 behavior: 'http:exploit'29 label: 'Atlassian - Arbitrary File Read'30 classification:31 - cve.CVE-2026-2158932 - attack.T119033 - cwe.CWE-2234