Atlassian Warns of Critical File-Access Flaw in Jira, Confluence

The 9.3-rated flaw lets unauthenticated attackers reach specific files, and Atlassian says cloud customers are already patched.

Atlassian warns of critical file-access flaw in Jira, Confluence

Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket.

Atlassian warns of critical file access flaw in its datacenter products

Tells users ‘action required’ – but maybe don’t make that action a Jira ticket, because it has this bug

Atlasian Alerts for Critical Failure that Exposes Files in Its Datacenter Products

Atlassian asked users of its Datacenter products to urgently install an update to close a vulnerability without authentication, rated 9.3, which allows access to specific files within the root of the web application.

Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)

Attackers who know where to look can read files from Atlassian Data Center installations without logging in, the company has warned. CVE-2026-21589 CVE-2026-21589, a critical arbitrary file access vulnerability with a 9.3 CVSS score, affects all versions of Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye. Atlassian cal…

Multiple Vulnerabilities in Atlassian Products (06 October 2026)

Multiple vulnerabilities have been discovered in Atlassian products. They allow an attacker to cause a breach of data confidentiality.

Critical Path Traversal in Atlassian Data Center Exposes Development Infrastructure

Critical Path Traversal in Atlassian Data Center Exposes Development Infrastructure The disclosure of CVE-2026-21589 on October 5, 2026, highlights a systemic fragility in the modern development stack. This critical path traversal vulnerability, carrying a CVSS 4.0 score of 9.3, affects eight self-hosted Atlassian Data Center products. While the vulnerability does not grant remote code execution […]

100 % of the sources are Center

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage