Historical version

This is version 1, as it stood on . It is not what this organization currently publishes — read the current version.

CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products

Rapid7 Version 1 original

Imported from official source

On October 5, 2026, Atlassian published a security advisory for CVE-2026-21589, a critical arbitrary file access vulnerability affecting eight products: Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible, and Fisheye. Atlassian assigned the vulnerability a CVSSv4 score of 9.3. …

This version

Version
1 of 2
Recorded
October 07, 2026 13:00
Change
Initial
Content hash
7f3be87811a8ec47c54d4a0bf7d9ed04
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.