Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket. [...]
Atlassian warns of critical file-access flaw in Jira, Confluence
Summary + source link. No paywalls, no tracking.