CVE-2026-21589 — Vulnerability intelligence

Atlassian — Multiple Products

Published: 2026-10-05T21:30:00.390Z

CVSS

9.3

CISA KEV

Known exploitation

Original source text (not a translation)

Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions.

Sources

• Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-21589