CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products
Imported from official source
On October 5, 2026, Atlassian published a security advisory for CVE-2026-21589, a critical arbitrary file access vulnerability affecting eight products: Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible, and Fisheye. Atlassian assigned the vulnerability a CVSSv4 score of 9.3. …
This version
- Version
- 2 of 2
- Recorded
- October 16, 2026 16:02
- Change
- Imported change
- Content hash
3c43533e55def434ae5aee8753b140ae- All versions
- Revision history