Atlassian warns of critical file access flaw in its datacenter products

Atlassian warns of critical file access flaw in its datacenter products

Tells users ‘action required’ – but maybe don’t make that action a Jira ticket, because it has this bug

Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)

Attackers who know where to look can read files from Atlassian Data Center installations without logging in, the company has warned. About CVE-2026-21589 CVE-2026-21589, a critical arbitrary file access vulnerability with a 9.3 CVSS score, affects all versions of Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye. Atlassian cal…

Critical Path Traversal in Atlassian Data Center Exposes Development Infrastructure

Critical Path Traversal in Atlassian Data Center Exposes Development Infrastructure The disclosure of CVE-2026-21589 on October 5, 2026, highlights a systemic fragility in the modern development stack. This critical path traversal vulnerability, carrying a CVSS 4.0 score of 9.3, affects eight self-hosted Atlassian Data Center products. While the vulnerability does not grant remote code execution […]

Atlassian Patches Critical Vulnerabilities in Jira, Confluence, Bitbucket, and Five More Products

Atlassian has disclosed a critical arbitrary file access vulnerability affecting eight products, including Jira, Confluence, and Bitbucket. Tracked as CVE-2026-21589, the flaw has a CVSS score of 9.3. It lets unauthenticated attackers access specific files in an affected application’s web root directory. The advisory, published on October 5, 2026, covers Bitbucket Data Center, Confluence Data […]