Research

Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)

On October 5th, Atlassian published patches&#;x26;#;xc2;&#;x26;#;xa0;for multiple products to fix an "Arbitrary File Access" vulnerability &#;x26;#;x5b; CVE-2026-21589 &#;x26;#;x5d;. An attacker can read arbitrary files in the web application&#;x26;#;39;s directory, potentially exposing sensitive information such as configuration files.

Read at SANS Internet Storm Center

Vendor

Atlassian

EPSS

0.99 (p100)

• SANS Internet Storm Center (isc.sans.edu)
• CVE-2026-21589 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 36
   Threat signal FortiGuard 12d ago

   Atlassian Arbitrary File Access Vulnerability

   EPSS 0.99 Fix available CVE-2026-21589 Atlassian
2. 46
   Outbreak alert FortiGuard 13d ago

   Atlassian Arbitrary File Access Vulnerability

   EPSS 0.99 CVE-2026-21589 Atlassian
3. 37
   CCCS advisory CCCS 16d ago

   Atlassian security advisory (AV26-1002)

   EPSS 0.99 CVE-2026-21589 Atlassian
4. 62
   CISA alert CISA 16d ago

   CISA Adds One Known Exploited Vulnerability to Catalog

   Exploited EPSS 0.99 CVE-2026-21589 Atlassian
5. 31
   Research Check Point Research 19d ago

   12th October – Threat Intelligence Report

   EPSS 0.99 CVE-2025-64393CVE-2026-88779CVE-2026-76455+1 more
6. 97
   Research Rapid7 24d ago

   CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products

   Exploited CVSS 9.3 EPSS 0.99 Fix available CVE-2026-21589 Atlassian
7. 42
   watchTowr Labs watchTowr 25d ago

   You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)

   EPSS 0.99 CVE-2026-21589 Atlassian
8. 90
   KEV NVD 26d ago

   Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

   KEV · due 18 Oct 2026 (overdue) EPSS 0.99 Fix available CVE-2026-21589 Atlassian