Hackers exploit critical Atlassian flaw after public PoC release

T1Covered by 1 source · first reported by BleepingComputer at 07 Oct, 12:49 UTC

A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. [...]

releasessecurity

Sources

• T1Hackers exploit critical Atlassian flaw after public PoC releaseBleepingComputer07 Oct, 12:49

Vulnerabilities

• CVE-2026-21589