{"generated_at":"2026-10-23T15:25:00.085Z","count":8,"incidents":[{"id":"atlassian-multiple-products-files-or-directories-accessi-cve-2026-21589","url":"https://pwned.coffee/i/atlassian-multiple-products-files-or-directories-accessi-cve-2026-21589","title":"Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","summary":"Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions. Added to CISA KEV on 2026-10-15 (federal deadline 2026-10-18).","severity":"critical","patch_status":"patched","status":"past","exploited":true,"affected":"Atlassian Multiple Products","fixed_versions":[],"ids":["CVE-2026-21589"],"stack":["ci","atlassian"],"first_seen":"2026-10-15T12:00:00.000Z","updated_at":"2026-10-15T12:00:00.000Z"},{"id":"gitea-runner-workflow-container-options-passes-host-name-cve-2026-73802","url":"https://pwned.coffee/i/gitea-runner-workflow-container-options-passes-host-name-cve-2026-73802","title":"gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled","summary":"### Summary act_runner appends workflow-controlled `jobs.<job>.container.options` directly to the Docker HostConfig for the job container. When runner privileged mode is disabled, only `Privileged` is forced false. Host namespace flags, capability expansion, and security profile overrides from workflow YAML are preserved in the final HostConfig. A…","severity":"critical","patch_status":"patched","status":"past","exploited":false,"affected":"gitea.com/gitea/runner (go)","fixed_versions":["gitea.com/gitea/runner 1.0.9-0.20260731160927-34bfa1915022"],"ids":["CVE-2026-73802"],"stack":["go","ci"],"first_seen":"2026-10-02T23:18:12Z","updated_at":"2026-10-02T23:18:12Z"},{"id":"jetbrains-teamcity-deserialization-of-untrusted-data-vul-cve-2026-63077","url":"https://pwned.coffee/i/jetbrains-teamcity-deserialization-of-untrusted-data-vul-cve-2026-63077","title":"JetBrains TeamCity Deserialization of Untrusted Data Vulnerability","summary":"JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol. Added to CISA KEV on 2026-08-05 (federal deadline 2026-08-08).","severity":"critical","patch_status":"patched","status":"past","exploited":true,"affected":"JetBrains TeamCity","fixed_versions":[],"ids":["CVE-2026-63077"],"stack":["ci"],"first_seen":"2026-08-05T12:00:00.000Z","updated_at":"2026-08-05T12:00:00.000Z"},{"id":"jetbrains-teamcity-relative-path-traversal-vulnerability-cve-2024-27199","url":"https://pwned.coffee/i/jetbrains-teamcity-relative-path-traversal-vulnerability-cve-2024-27199","title":"JetBrains TeamCity Relative Path Traversal Vulnerability","summary":"JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed. Added to CISA KEV on 2026-04-20 (federal deadline 2026-05-04).","severity":"critical","patch_status":"patched","status":"past","exploited":true,"affected":"JetBrains TeamCity","fixed_versions":[],"ids":["CVE-2024-27199"],"stack":["ci"],"first_seen":"2026-04-20T12:00:00.000Z","updated_at":"2026-04-20T12:00:00.000Z"},{"id":"jfrog-artifactory-incorrect-authorization-vulnerability","url":"https://pwned.coffee/i/jfrog-artifactory-incorrect-authorization-vulnerability","title":"JFrog Artifactory Incorrect Authorization Vulnerability","summary":"JFrog Artifactory contains an incorrect authorization vulnerability that leads to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope. Can be chained with CVE-2026-42018. Added to CISA KEV on 2026-09-11 (federal deadline 2026-09-25).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"JFrog Artifactory","fixed_versions":[],"ids":["CVE-2026-42016","CVE-2026-42018"],"stack":["ci"],"first_seen":"2026-09-11T12:00:00.000Z","updated_at":"2026-09-11T12:00:00.000Z"},{"id":"jfrog-artifactory-improper-authentication-vulnerability-cve-2026-82329","url":"https://pwned.coffee/i/jfrog-artifactory-improper-authentication-vulnerability-cve-2026-82329","title":"JFrog Artifactory Improper Authentication Vulnerability","summary":"JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges. Added to CISA KEV on 2026-09-02 (federal deadline 2026-09-05).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"JFrog Artifactory","fixed_versions":[],"ids":["CVE-2026-82329"],"stack":["ci"],"first_seen":"2026-09-02T12:00:00.000Z","updated_at":"2026-09-02T12:00:00.000Z"},{"id":"jfrog-artifactory-improper-limitation-of-a-pathname-to-a-cve-2026-66384","url":"https://pwned.coffee/i/jfrog-artifactory-improper-limitation-of-a-pathname-to-a-cve-2026-66384","title":"JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability","summary":"JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions. Added to CISA KEV on 2026-08-27 (federal deadline 2026-09-10).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"JFrog Artifactory","fixed_versions":[],"ids":["CVE-2026-66384"],"stack":["docker","ci"],"first_seen":"2026-08-27T12:00:00.000Z","updated_at":"2026-08-27T12:00:00.000Z"},{"id":"gitea-code-injection-vulnerability-cve-2026-60004","url":"https://pwned.coffee/i/gitea-code-injection-vulnerability-cve-2026-60004","title":"Gitea Code Injection Vulnerability","summary":"Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell commands as the Gitea service account. Added to CISA KEV on 2026-08-25 (federal deadline 2026-08-28).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Gitea Gitea","fixed_versions":[],"ids":["CVE-2026-60004"],"stack":["ci"],"first_seen":"2026-08-25T12:00:00.000Z","updated_at":"2026-08-25T12:00:00.000Z"}]}