security · VULNERABILITY & INCIDENT SIGNALS · severity 4/5 · 90% confidence
CVE-2026-21569: Atlassian Crowd XXE Vulnerability
Mitsubishi UFJ Financial — Fintech
What happened
An XML External Entity Injection (XXE) vulnerability exists in Atlassian Crowd Data Center and Server, allowing authenticated attackers to access internal files and potentially escalate privileges.
Agent reasoning
The vulnerability is documented with a detailed technical description and exploitation potential. [2]