Atlassian Warns of Critical File-Access Flaw in Jira, Confluence
The 9.3-rated flaw lets unauthenticated attackers reach specific files, and Atlassian says cloud customers are already patched.
10 Articles
10 Articles
Atlassian warns of critical file-access flaw in Jira, Confluence
Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket.
The Register
IT Security News - cybersecurity, infosecurity newsAtlassian warns of critical file access flaw in its datacenter products
Tells users ‘action required’ – but maybe don’t make that action a Jira ticket, because it has this bug
Atlassian asked users of its Datacenter products to urgently install an update to close a vulnerability without authentication, rated 9.3, which allows access to specific files within the root of the web application.
Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)
Attackers who know where to look can read files from Atlassian Data Center installations without logging in, the company has warned. About CVE-2026-21589 CVE-2026-21589, a critical arbitrary file access vulnerability with a 9.3 CVSS score, affects all versions of Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye. Atlassian cal…
Global Security Mag OnlineGlobal Security Mag OnlineMultiple vulnerabilities have been discovered in Atlassian products. They allow an attacker to cause a breach of data confidentiality.
Critical Path Traversal in Atlassian Data Center Exposes Development Infrastructure
Critical Path Traversal in Atlassian Data Center Exposes Development Infrastructure The disclosure of CVE-2026-21589 on October 5, 2026, highlights a systemic fragility in the modern development stack. This critical path traversal vulnerability, carrying a CVSS 4.0 score of 9.3, affects eight self-hosted Atlassian Data Center products. While the vulnerability does not grant remote code execution […]
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
