Detection Artifact Generator attempts to check if the target is vulnerable to CVE-2026-21589. Detection is implemented for following products:
Sample run against vulnerable Jira instance:
$ python3 watchTowr-vs-Atlassian-CVE-2026-21589.py -H
__ _ ______ _/ |__ ____ | |_\__ ____\____ _ ________
\ \/ \/ \__ \ ___/ ___\| | \| | / _ \ \/ \/ \_ __ \
\ / / __ \| | \ \___| Y | |( \ / | | \/
\/\_/ (____ |__| \___ |___|__|__ | \__ / \/\_/ |__|
(*) CVE-2026-21589 - Jira/Confluence/Bitbucket Arbitrary File Read Detection Artifact Generator
- Piotr | Sonny | Yordan of watchTowr (@watchTowrcyber)
[+] Attempting to send payloads for Jira, Confluence and Bitbucket
$ python3 watchTowr-vs-Atlassian-CVE-2026-21589.py -H
__ _ ______ _/ |__ ____ | |_\__ ____\____ _ ________
\ \/ \/ \__ \ ___/ ___\| | \| | / _ \ \/ \/ \_ __ \
\ / / __ \| | \ \___| Y | |( \ / | | \/
\/\_/ (____ |__| \___ |___|__|__ | \__ / \/\_/ |__|
(*) CVE-2026-21589 - Jira/Confluence/Bitbucket Arbitrary File Read Detection Artifact Generator
- Piotr | Sonny | Yordan of watchTowr (@watchTowrcyber)
[+] Attempting to send payloads for Jira, Confluence and Bitbucket
[-] Unknown response - probably NOT VULNERABLE
This script attempts to detect if Jira/Confluence/Bitbucket is vulnerable to CVE-2026-21589 Arbitrary File Read vulnerability.
Full version of affected versions can be found here [vendor advisory](
According to the official advisory, patched versions are:
# Follow [watchTowr]( Labs
For the latest security research follow the [watchTowr]( Labs Team
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
