vulnerability
Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
HighCVSS 9.3EPSS 100%
Summary
A critical vulnerability (CVE-2026-21589) in eight Atlassian Data Center products allows unauthenticated attackers to read specific files in the web application root directory. The vulnerability is similar to a previously exploited path traversal flaw (CVE-2021-26086), and Atlassian advises customers to check access logs for suspicious activity.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data
Also covered by 6 other source(s)
- Vulnérabilité dans les produits Atlassian (06 octobre 2026)
- Atlassian warns of critical file access flaw in its datacenter products
- Atlassian Patches Critical Vulnerability Affecting 8 Products
- Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details
- Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)
- Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication