Atlassian
Atlassian discloses critical file access flaw in Jira, Confluence and Bitbucket
Atlassian has warned of a critical arbitrary file access vulnerability, CVE-2026-21589, affecting eight products including Jira, Confluence and Bitbucket. The flaw lets unauthenticated attackers access specific files in the web root directory. Atlassian is urging customers to patch immediately.
