Critical Vulnerability (CVE-2026-21589) Affects Multiple Atlassian Products, Public Exploit Code Available

Rapid7 has issued an urgent alert for a critical vulnerability, CVE-2026-21589, impacting eight Atlassian products including Jira, Confluence, Bitbucket, and Crowd. Rated 9.3 (critical), the flaw allows unauthenticated remote attackers to access sensitive files, with technical details and proof-of-concept exploit code now publicly available. Atlassian Cloud customers are already protected, but self-managed instances require immediate patching.