Atlassian security news · Threat Recapvendors/atlassian.htmlSecurity news, advisories and CVEs for AtlassianMon, 19 Oct 2026 12:28:44 GMT U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities cataloghttps://securityaffairs.com/201086/hacking/u-s-cisa-adds-atlassian-flaw-to-its-known-exploited-vulnerabilities-catalog.htmltp5ofkFri, 16 Oct 2026 11:05:55 GMTSecurity Affairs. U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Atlassian flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Atlassian flaw, tracked as CVE-2026-21589 (CVSS score of…VulnerabilityZero-day Critical Flaw in Multiple Atlassian Products Exploited in the Wildhttps://www.infosecurity-magazine.com/news/critical-vulnerability-atlassian/1inpznjThu, 08 Oct 2026 10:05:00 GMTInfosecurity Magazine. A critical vulnerability affecting eight Atlassian products, including Jira and Confluence, is being exploited in the wild, said VulnCheckVulnerabilityZero-day Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)https://www.helpnetsecurity.com/2026/10/07/exploitation-critical-atlassian-flaw-cve-2026-21589/b164roWed, 07 Oct 2026 14:21:35 GMTHelp Net Security. One day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products, and a few hours after watchTowr researchers published a technical rundown of the flaw, attackers have…VulnerabilityZero-day Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)https://news.google.com/rss/articles/CBMimwFBVV95cUxOYWlaRTFuTXJhaDBwd3cyVUphbFBaQnNRTnJfZWRRLW1YdXZGYmRkRXFxY3IyREdyVkJuSG1jOWRTQ0ZjaTBaclRETWdDRmpIaHBOV1RGLTBkMFB2by1hZWZIVjZ3dHBmRlJ4SE5kN3FYbFhwRnV0QURlOFFzQ2pzVEtjZFFwZGNHejZIZjZYd2FKa2dDdDI2TlpuOA?oc=5p755jtWed, 07 Oct 2026 14:21:35 GMTHelp Net Security. Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589) Help Net SecurityVulnerabilityZero-day Atlassian Patches Critical Vulnerability Affecting 8 Productshttps://www.securityweek.com/atlassian-patches-critical-vulnerability-affecting-8-products/1m69uc9Wed, 07 Oct 2026 06:37:16 GMTSecurityWeek. Unauthenticated attackers could exploit the flaw to access specific files in the web application root directory.Vulnerability Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)https://news.google.com/rss/articles/CBMihwFBVV95cUxQOF93dG5DNkU3Uk9jblJ5VUtMMDhyZW1lOUVOX1dKWElya0swM3A5Ujk0aGk2ZmVfZ28yRnFTZkd2RXJwRVBwNHNmWlpCSkFITkZWZDVxdlVmcm50MHRhNkplYmZfSzM5S1M0N1JYSHdjSzJ4MWNKS2FMczVnYTZEYXhndENCVWs?oc=516nkye0Tue, 06 Oct 2026 12:26:30 GMTHelp Net Security (+2 more sources). Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589) Help Net SecurityVulnerabilityZero-day Atlassian warns of critical file access flaw in its datacenter productshttps://www.theregister.com/security/2026/10/06/atlassian-warns-of-critical-file-access-flaw-in-its-datacenter-products/53012846ckfefTue, 06 Oct 2026 04:20:00 GMTThe Register (+9 more sources). Tells users ‘action required’ – but maybe don’t make that action a Jira ticket, because it has this bugVulnerabilityZero-dayAdvisoryResearch