Attackers have begun targeting a critical vulnerability in self-hosted Atlassian software following the release of public proof-of-concept code. The Atlassian file access flaw, tracked as CVE-2026-21589, affects eight product families, including Jira, Confluence and Bitbucket. Security company Previdian reported exploitation attempts on its honeypot network within two hours of researchers publishing technical details. However, those…
Atlassian has released security updates for a critical vulnerability affecting several self-hosted products, including Jira, Confluence and Bitbucket. The Atlassian file-access flaw, tracked as CVE-2026-21589, allows unauthenticated attackers to access specific files within an application’s web root directory. However, exploitation requires advance knowledge of the target file’s exact name and path. The vulnerability does not…