CVE-2026-21589

Stories

1. Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)

   Scans are reported for Atlassian vulnerability CVE-2026-21589 after Atlassian publishes patches for multiple products on October 5. The arbitrary file access flaw can let attackers read files in a web application’s directory, potentially exposing configuration files.

   SANS Internet Storm Center23 hours ago

2. 

   Attackers exploit critical Atlassian Data Center file-access vulnerability

   A critical file-access flaw in Atlassian Data Center products is being exploited. Reports say unauthenticated attackers can access specific files, with one account noting the attacker must know the exact file name and path; the supplied coverage does not establish that directory contents can be listed.

   3 sources1 day ago

Topics

• Security

Publishers

• BleepingComputer
• SANS Internet Storm Center
• The Hacker News
• The Register

Often mentioned with

• Atlassian
• Bitbucket
• Confluence
• Jira
• Jira Service Management Data Center
• Jira Software