Atlassian warns of critical file access flaw in its datacenter products
ID: e4d90265-941b-5515-9e0f-acf9829fba47
STIX ID: report--e4d90265-941b-5515-9e0f-acf9829fba47
Feed Name: The Register (Security)
Threat Score
Atlassian warned of a critical arbitrary file access vulnerability (CVE-2026-21589, CVSS 9.3) in its datacenter products — including Bitbucket, Confluence, Jira (Software and Service Management), Bamboo, Crowd, Crucible, and Fisheye — which allows unauthenticated attackers to access specific files in the web application root; Atlassian has released fixes and advises immediate patching or restricting internet access for affected instances.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.