Serious vulnerabilities in Jira, Confluence, and others: The issue of internal files being read without login, and the necessary countermeasures now

On October 5, 2026, Atlassian announced that 8 products, including Jira and Confluence, have a vulnerability that allows ...
BleepingComputer

Atlassian warns of critical file-access flaw in Jira, Confluence

Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including ...

Atlassian’s critical flaw turns eight enterprise products into one big security problem

The 9.3-rated vulnerability lets unauthenticated attackers access specific files outside their intended boundaries. Atlassian is calling for immediate patching.

Hackers exploit critical Atlassian flaw after public PoC release

A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication.