vulnerability
Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
CriticalCVSS 9.3ExploitedEPSS 2%
Summary
Threat actors are actively exploiting a critical vulnerability (CVE-2026-21589) in Atlassian’s self-hosted Data Center products, specifically Bitbucket, Confluence, Jira Software, Jira Service Management, Bamboo, Crowd, Crucible and Fisheye. Patches are available, and organizations are advised to update immediately or implement firewall rules to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data
Also covered by 6 other source(s)
- Vulnérabilité dans les produits Atlassian (06 octobre 2026)
- Atlassian warns of critical file access flaw in its datacenter products
- Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
- Atlassian Patches Critical Vulnerability Affecting 8 Products
- Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details
- Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)