Atlassian · Crowd Server · CVE-2026-21569
**Name of the Vulnerable Software and Affected Versions**
Crowd Data Center and Server versions 7.1.0 through 7.1.2
**Description**
An authenticated attacker can access local and remote content due to an XML External Entity Injection (XXE) issue. This can have a high impact on confidentiality and availability. The issue was reported through an internal program.
**Recommendations**
Upgrade to a release greater than or equal to Crowd Data Center and Server version 7.1.3.