Exploitation Attempts Begin for Critical Atlassian Data Center Vulnerability (CVE-2026-21589)

Attackers have started exploiting a critical arbitrary file access vulnerability (CVE-2026-21589) in multiple Atlassian Data Center products, including Bitbucket, Confluence, and Jira. The flaw, rated 9.3 in severity, allows unauthenticated attackers to access specific sensitive files within the web application root directory. Atlassian has released patches and urged customers to upgrade immediately or isolate vulnerable instances, as exploitation attempts were observed within hours of public technical details becoming available.