A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication.

An authentication protections bypass in Atlassian software has been fixed. (Source: Atlassian) Australian software company Atlassian has issued fixes for a critically rated vulnerability in its Jira ...

Attackers are exploiting a recently patched and critical severity Atlassian Confluence authentication bypass flaw to encrypt victims' files using Cerber ransomware. Described by Atlassian as an ...

The disclosure of CVE-2026-21589 on October 5, 2026, highlights a systemic fragility in the modern development stack. This critical path traversal vulnerability, carrying a CVSS 4.0 score of 9.3, ...