A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication.
Update 5/21/24: Added Atlassian statement to the bottom of the article. Threat actors were found breaching AWS accounts using authentication secrets leaked as plaintext in Atlassian Bitbucket artifact ...
An authentication protections bypass in Atlassian software has been fixed. (Source: Atlassian) Australian software company Atlassian has issued fixes for a critically rated vulnerability in its Jira ...
The disclosure of CVE-2026-21589 on October 5, 2026, highlights a systemic fragility in the modern development stack. This critical path traversal vulnerability, carrying a CVSS 4.0 score of 9.3, ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results