A proof-of-concept exploit targets a critical file-read flaw in self-managed Atlassian products, exposing sensitive files and granting Jira administrator access .
Atlassian has patched CVE-2026-21589, a critical unauthenticated arbitrary file access vulnerability impacting eight products.