Post
Mat Clark
secureinseconds.com
did:plc:pi254kimcmrsfopiodbh74xq
CVE-2026-21589: pre-auth file access, CVSS 9.3, in eight Atlassian Data Center products incl. Jira and Confluence. Fixed 5 Oct. The question is not whether you are vulnerable but what an attacker would have read: https://secureinseconds.com/blog/2026-10-11-atlassian-cve-2026-21589-preauth-file-read
2026-10-14T08:30:04.864Z