Post

CVE-2026-21589: pre-auth file access, CVSS 9.3, in eight Atlassian Data Center products incl. Jira and Confluence. Fixed 5 Oct. The question is not whether you are vulnerable but what an attacker would have read: https://secureinseconds.com/blog/2026-10-11-atlassian-cve-2026-21589-preauth-file-read