Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)

T2Covered by 1 source · first reported by Help Net Security at 06 Oct, 12:26 UTC

Attackers who know where to look can read files from Atlassian Data Center installations without logging in, the company has warned. About CVE-2026-21589 CVE-2026-21589, a critical arbitrary file access vulnerability with a 9.3 CVSS score, affects all versions of Bitbucket Data Center, Confluence…