CVE-2026-21589

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

Bitbucket Data Center

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file's exact name and path; this vulnerability does not allow…

6. Okt 2026

Ausgewertete Quellen

• Hersteller
  https://jira.atlassian.com/browse/BAM-26567
• Hersteller
  https://jira.atlassian.com/browse/BSERV-20604
• Hersteller
  https://jira.atlassian.com/browse/CONFSERVER-104488
• Hersteller
  https://jira.atlassian.com/browse/CRUC-8741
• Hersteller
  https://jira.atlassian.com/browse/CWD-6610
• Hersteller
  https://jira.atlassian.com/browse/FE-7583
• Hersteller
  https://jira.atlassian.com/browse/JRASERVER-79546
• Hersteller
  https://jira.atlassian.com/browse/JSDSERVER-16809
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21589
• CISA
  Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
• NVD
  CVE-2026-21589
• GitHub
  https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589