Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)

At­tac­kers who know where to look can read files from Atlas­sian Data Cen­ter ins­ta­lla­tions without log­ging in, the com­pany has war­ned. About CVE-2026-21589 CVE-2026-21589, a cri­ti­cal ar­bi­trary file ac­cess vul­ne­ra­bi­lity with a 9.3 CVSS score, af­fects all ver­sions of Bit­buc­ket Data Cen­ter, Con­fluen­ce Data Cen­ter, Jira Ser­vi­ce Ma­na­ge­ment Data Cen­ter, Jira Soft­wa­re Data Cen­ter, Bam­boo Data Cen­ter, Crowd Data Cen­ter, Cru­ci­ble and Fishe­ye. Atlas­sian cal­cu­la­ted the CVSS 4.0 score th­rough its in­ter­nal as­sess­ment and pu­blished … More → The post Atlas­sian urges im­me­dia­te pat­ching of cri­ti­cal Data Cen­ter file ac­cess vul­ne­ra­bi­lity (CVE-2026-21589) ap­pea­red first on Help Net Se­cu­rity .