Advisories

Atlassian security advisory (AV26-1002)

Read at Canadian Centre for Cyber Security Alerts & Advisories

Vendor

Atlassian

EPSS

0.99 (p100)

• Canadian Centre for Cyber Security Alerts & Advisories (cyber.gc.ca)
• CVE-2026-21589 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 36
   Threat signal FortiGuard 12d ago

   Atlassian Arbitrary File Access Vulnerability

   EPSS 0.99 Fix available CVE-2026-21589 Atlassian
2. 46
   Outbreak alert FortiGuard 13d ago

   Atlassian Arbitrary File Access Vulnerability

   EPSS 0.99 CVE-2026-21589 Atlassian
3. 62
   CISA alert CISA 16d ago

   CISA Adds One Known Exploited Vulnerability to Catalog

   Exploited EPSS 0.99 CVE-2026-21589 Atlassian
4. 31
   Research Check Point Research 19d ago

   12th October – Threat Intelligence Report

   EPSS 0.99 CVE-2025-64393CVE-2026-88779CVE-2026-76455+1 more
5. 31
   ISC diary SANS ISC 24d ago

   Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)

   EPSS 0.99 CVE-2026-21589 Atlassian
6. 97
   Research Rapid7 24d ago

   CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products

   Exploited CVSS 9.3 EPSS 0.99 Fix available CVE-2026-21589 Atlassian
7. 42
   watchTowr Labs watchTowr 25d ago

   You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)

   EPSS 0.99 CVE-2026-21589 Atlassian
8. 90
   KEV NVD 26d ago

   Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

   KEV · due 18 Oct 2026 (overdue) EPSS 0.99 Fix available CVE-2026-21589 Atlassian