Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

AI Summary

A critical unauthenticated file-read vulnerability, CVE-2026-21589 (CVSS 9.3), affects eight Atlassian Data Center products including Confluence, Jira, and Bitbucket, disclosed October 5. Unauthenticated attackers who know a file's exact path can read arbitrary files from the web application root, posing significant risks to self-hosted enterprise deployments that often store sensitive configuration data.

Read full article → https://thehackernews.com/2026/10/critical-atlassi…

Relevance score: 90.0/100

# More from October 07

1
Hackers obtain counterfeit TLS certificates for Google and other large services Ars Technica Security
2
Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier SecurityWeek
4
8.8 Million Impacted by Data Breach at Denmark’s Central Person Register SecurityWeek
5
Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks CyberScoop
6
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland BleepingComputer
7
FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach The Hacker News
8
ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits The Hacker News
9
Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System SecurityWeek
10
FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware SecurityWeek