#confluence
-
Atlassian patches critical file-access flaw in Jira and Confluence
The CVE-2026-21589 vulnerability lets an unauthenticated attacker read specific files in a web application's root directory. It affects self-hosted Data Center products, including Confluence, Jira and Bitbucket.