Covered by 2 sources — first reported by watchTowr Labs, Oct 6, 17:01 UTC

You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)

MentionsAtlassian Confluence Jira

Coverage

Oct 6, 17:01 UTCwatchTowr Labs
You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)
Oct 7, 12:11 UTCRapid7 Blog
CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products

Vulnerabilities in this story

CVE-2026-21589Critical 9.3Known exploitedEPSS 99.5%