Back Linkedin

The Hacker News' Post

Linkedin • October 6, 2026

‼️ A critical Atlassian vulnerability rated CVSS 9.3 affects 8 Data Center products. CVE-2026-21589 can let unauthenticated attackers read specific files if they know the exact file path. Internet-facing instances should be upgraded or restricted. Details -

To view or add a , sign in

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE-2026-21589 Vulnerability in Atlassian Data Center Products On October 5, 2026, Atlassian disclosed CVE-2026-21589, a critical arbitrary file access vulnerability with a CVSS score of 9.3. This flaw affects eight self-hosted Data Center products, including Jira Software, Confluence, and Bitbucket, allowing unauthenticated attackers to read specific files within the web application root directory if they know the exact file path. The vulnerability does not allow directory listing, limiting exposure to files with known names. Atlassian has released patches for all affected versions, and while no exploitation has been confirmed in the wild, organizations are urged to apply the fixes immediately. Temporary mitigations include restricting external access to instances and implementing web application firewall rules. The flaw impacts all versions prior to the fixed releases, including those that have reached end-of-life status. 43 sources 72

Extracted Entities

The Hacker News' Post

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)