Atlassian News Articles

Atlassian CVE-2026-21589 Exploited Hours After Public Disclosure - IT Security News

Attackers started scanning the systems vulnerable to the Atlassian flaw several hours after the researchers published the technical details and proof-of-concept code. Assigned the identifier CVE-2026-21589,...

1 week ago

Critical Flaw in Multiple Atlassian Products Exploited in the Wild

A critical vulnerability affecting eight Atlassian products, including Jira and Confluence, is being exploited in the wild, said VulnCheck

2 weeks ago

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication

Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products

2 weeks ago

Atlassian Data Center Flaw Sparks Attacks in Hours as Enterprises Race to Patch Eight Products

A critical arbitrary file access flaw (CVE-2026-21589) in eight Atlassian Data Center products triggered exploitation attempts within hours of technical details emerging. Enterprises running self-hosted Jira, Confluence, Bitbucket and related tools face urgent patching mandates as attackers target c...

2 weeks ago

Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589) - IT Security News

2026-10-07 16:10 One day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products, and a few hours...

2 weeks ago

Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589) - Help Net Security

A few hours after researchers published a technical rundown of CVE-2026-21589, exploitation attempts were registered by honeypots.

2 weeks ago

Hackers exploit critical Atlassian flaw after public PoC release

A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication.

2 weeks ago

CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products - IT Security News

Overview On October 5, 2026, Atlassian published a security advisory for CVE-2026-21589, a critical arbitrary file access vulnerability affecting eight products: Bitbucket Data Center, Confluence Data Center,...

2 weeks ago

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

Attackers are exploiting an Atlassian Data Center flaw that enables unauthenticated access to specific webroot files.

2 weeks ago

Atlassian Data Centre products hit by unauthenticated file access vulnerability

Key points Atlassian has fixed CVE-2026-21589, a critical flaw rated 9.3 on the CVSS 4.0 scale that lets unauthenticated attackers read files from the web application root of eight self-hosted products,...

2 weeks ago

Atlassian warns of critical file-access flaw in Jira, Confluence

Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted Data Center products, including Confluence, Jira, and Bitbucket.

2 weeks ago

Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589) - Help Net Security

CVE-2026-21589 lets unauthenticated attackers read files on Atlassian Data Center servers. All versions are affected.

2 weeks ago

Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center - IT Security News

2026-10-06 09:10 Atlassian has announced a critical vulnerability related to arbitrary file access that affects Jira Software Data Center and Confluence Data Center. This vulnerability,...

2 weeks ago

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

Atlassian fixes a critical path traversal in 8 Data Center products that lets unauthenticated attackers read files if exact paths are known.

2 weeks ago

Atlassian warns of critical file access flaw in its datacenter products

Tells users ‘action required’ – but maybe don’t make that action a Jira ticket, because it has this bug

2 weeks ago

Atlassian warns of critical file access flaw in its datacenter products

Tells users ‘action required’ – but maybe don’t make that action a Jira ticket, because it has this bug

2 weeks ago

Critical Jira Vulnerability Enables Arbitrary File Modification via JVM Access

The vulnerability, tracked as CVE-2025-22167, carries a high severity rating with a CVSS score of 8.7 and presents a significant risk

CVE-2025-22157 Impact, Exploitability, and Mitigation Steps | Wiz

Understand the critical aspects of CVE-2025-22157 with a detailed vulnerability assessment, exploitation potential, affected technologies, and remediation guidance.

CVE-2025-22157

This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center and Server 5.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Service Management Data Center and Server This PrivEsc (Privilege Escalation) vulnerability, w...

Atlassian fixes critical RCE vulnerabilities in its products

Atlassian has fixed four critical vulnerabilities in its software that could result in remote code execution. The first vulnerability is CVE-2022-1471 with a CVSS score 9.8, is a Deserialization vulnerability in the SnakeYAML library that can lead to remote code execution in multiple products The se...

Atlassian Confluence Vulnerability Exploited in Crypto Mining Campaigns

Atlassian Confluence vulnerability CVE-2023-22527 actively exploited for cryptocurrency mining. Urgent patching recommended to prevent attacks.

Silent Intrusions: Godzilla Fileless Backdoors Targeting Atlassian Confluence

Malware Trend Micro discovered that old Atlassian Confluence versions that were affected by CVE-2023-22527 are being exploited using a new in-memory fileless...

Attackers Exploit Critical Atlassian Confluence Flaw for Cryptojacking

Novel attack vectors leverage the CVE-2023-22527 RCE flaw discovered in January, which is still under active attack, to turn targeted cloud environments into cryptomining networks.

Atlassian Fixes Server and Data Center Flaws - Spiceworks

Atlassian has released security updates to patch critical vulnerabilities in its server and data center products. Find out more.

Atlassian Confluence Flaw Enables Remote Code Execution - Spiceworks

Explore the details of a critical vulnerability in Atlassian Confluence that enables remote code execution. Learn how users can protect their systems with prompt updates.