You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)
Welcome back to yet another episode of "security was taken seriously". Being who we are (and constantly being exposed to what we see…), we recognize we have been doomed to eternal damnation as we keep on watching security best practices crumble behind “secure by design”
- Vendor
- Atlassian
- Product
- Confluence, Jira
- EPSS
- 0.99 (p100)
- Exposure class
- Collaboration
Why it ranks 42 (Notable)
- EPSS 0.99 (high probability of exploitation)
- Product class: collaboration
- Widely deployed vendor product (Atlassian)
- Covered by 10 independent sources
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- watchTowr Labs (labs.watchtowr.com)
- CVE-2026-21589 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.