Coverage dated October 6, 2026

Atlassian warns of critical file-access flaw in Jira, Confluence

Headline from Bleeping Computer

Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket. [...]

Bleeping Computer's own description from its feed. We collect headlines and these descriptions, not full articles; read the original reporting below.

Reports & sources

2 articles, oldest first.

  1. The Register

    Atlassian warns of critical file access flaw in its datacenter products (opens The Register)

    Published

    The Register's feed description

    Tells users ‘action required’ – but maybe don’t make that action a Jira ticket, because it has this bug

  2. Bleeping Computer

    Atlassian warns of critical file-access flaw in Jira, Confluence (opens Bleeping Computer)

    Published

    Bleeping Computer's feed description

    Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket. [...]

Atlassian warns of critical file-access flaw in Jira, Confluence | Since Then