Atlassian CVE-2026-21589 Explained: Jira, Confluence and Bitbucket Data Center Flaw, Fixed Versions and What to Do Now
A critical (CVSS 9.3) file access bug in eight Atlassian Data Center products is being exploited, with attacks starting about two hours after technical details were published. Here is what it is, which versions fix it, Atlassian's temporary mitigations and a tested script to check your access logs.