Atlassian Patches Critical CVE-2026-21589 File-Read Flaw Across Bitbucket, Jira, Bamboo and Five Other Data Center Products
Atlassian disclosed CVE-2026-21589, a 9.3-rated path traversal letting unauthenticated attackers read known files in eight self-hosted products, with fixes listed for each.