Atlassian warns of critical file-access flaw in Jira, Confluence

T1Covered by 1 source · first reported by BleepingComputer at 06 Oct, 17:34 UTC

Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket. [...]

cloudsecurity

Sources

• T1Atlassian warns of critical file-access flaw in Jira, ConfluenceBleepingComputer06 Oct, 17:34

Vulnerabilities

• CVE-2026-21589