Atlassian security advisory (AV26-1002) - Update 2

Serial number: AV26-1002Date: October 5, 2026Updated: October 15, 2026 As of October 5, 2026, Atlassian is affected by a vulnerability in the following products: Update 1 Open source reporting indicates that CVE-2026-21589 is being exploited in the wild. Update 2 On October 15, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-21589 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.