CVE-2026-21589: Critical Atlassian File Access
Atlassian disclosed CVE-2026-21589, a critical unauthenticated file-access flaw in eight self-hosted products.
Atlassian disclosed CVE-2026-21589, a critical unauthenticated arbitrary file-access vulnerability. The flaw affects eight self-hosted Atlassian products and is scored under CVSS v4.0; the numeric score is not included in the available text. The report describes a disclosure and does not state that exploitation has been observed.
- CVE-2026-21589 is an unauthenticated arbitrary file-access flaw.
- Atlassian rates the issue critical and scores it with CVSS v4.0.
- Eight self-hosted Atlassian products are affected.
- The available report describes disclosure, not observed exploitation.
- CVEs
- CVE-2026-21589
- Vendors
- Atlassian
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-21589 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | 9.3 | 99% | KEVPoC ×10 | KEV |
From the original article
CVE-2026-21589: Critical Atlassian File Access Atlassian has disclosed CVE-2026-21589 , a critical unauthenticated arbitrary file-access vulnerability affecting eight self-hosted products. The flaw carries a CVSS v4. 0 sc
By ameer · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.