Atlassian

Atlassian disclosed a critical 9.3-rated arbitrary file access vulnerability (CVE-2026-21589) affecting its Data Center products including Bitbucket and Confluence, allowing unauthenticated attackers to access specific files if they know the exact filename and path. Fixed versions have been released and immediate patching is recommended.