NewswatchTowr Labs
You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)
Linked advisories
- CVE-2026-21589h3.
- CVE-2026-21589Security Advisory 2026-015 — Critical Vulnerability in Multiple Atlassian Products
- CVE-2026-21589Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- CVE-2026-21589Atlassian Multiple Products — Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- CVE-2026-21589Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Schwachstelle ermöglicht Offenlegung von Informationen
- CVE-2026-21589Critical Vulnerability in Atlassian Data Center Products
Affected vendors and products
- Atlassian Atlassian Bamboo
- Atlassian Bamboo Data Center
- Atlassian Atlassian Bitbucket Server
- Atlassian Bitbucket Data Center
- Atlassian Bitbucket Server
- Atlassian Atlassian Confluence
- Atlassian Confluence Data Center
- Atlassian Atlassian Crowd
- Atlassian Crowd Data Center
- Atlassian Atlassian Crucible
- Atlassian Atlassian Fisheye
- Atlassian Atlassian Jira Data Center
More on Confluence
Other advisories
- HighCVE-2026-13676Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Mehrere Schwachstellen
- HighCVE-2026-56819Atlassian Bamboo, Bitbucket, Confluence, Fisheye/Crucible, Jira Software und Jira Service Management: Mehrere Schwachstellen
- CriticalCVE-2026-47838Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye, und Jira): Mehrere Schwachstellen
- CriticalCVE-2026-21589Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Schwachstelle ermöglicht Offenlegung von Informationen
- MediumCVE-2026-106559Backstage: Improper input validation in Confluence to Markdown scaffolder module
- MediumCVE-2026-106559Backstage: Improper input validation in Confluence to Markdown scaffolder module
- Not ratedosv:CVE-2026-106559Backstage: Improper input validation in Confluence to Markdown scaffolder module
- HighCVE-2026-47838Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management: Mehrere Schwachstellen
Other news entries
- Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Hackers exploit critical Atlassian flaw after public PoC releaseNewsBleepingComputer
- Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Schwachstelle ermöglicht Offenlegung von InformationenVulnerabilityBSI CERT-Bund
- Atlassian warns of critical file-access flaw in Jira, ConfluenceNewsBleepingComputer
- NCSC-2026-0402 [1.00] [M/H] Kwetsbaarheid verholpen in Atlassian Data Center productenNewsNCSC-NL
- Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Schwachstelle ermöglicht Offenlegung von InformationenVulnerabilityBSI CERT-Bund
- Atlassian Bamboo, Bitbucket, Confluence, Fisheye/Crucible, Jira Software und Jira Service Management: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
ID