#CVE-2026-21589

One flaw, eight Atlassian products, no login required

A critical file-access vulnerability published this month lets anyone on the internet read files inside Atlassian's most trusted enterprise tools without ever signing in.