Serial number: AV26-1076 Date: October 22, 2026 As of October 20, 2026, Atlassian is affected by vulnerabilities in the following products: Bamboo Data Center and Server Version 12.1.12 and prior Version 10.2.24 and prior Bitbucket Data Center and Server Version 10.2.8 and prior Version 10.5.1 and prior Version 9.4.26 and prior Confluence Data Center and Server Version 11.0.0 and prior Version 10.2.19 and prior Version 9.2.26 and prior Crowd Data Center and Server Version 7.2.4 and prior…
CISA added CVE-2026-21589 to the Known Exploited Vulnerabilities catalog. Affected product: Atlassian Multiple Products. Remediation due date: 2026-10-18.
On 5 October 2026, Atlassian published a security advisory addressing a critical arbitrary file access vulnerability. It affects Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye. CERT-EU strongly recommends upgrading all affected installations to a fixed version as soon as possible, starting with instances accessible from the internet. CERT-EU also recommends checking access…
De kwetsbaarheid bevindt zich in meerdere producten binnen het Atlassian Data Center-platform, waaronder Jira Software, Jira Service Management, Confluence, Bitbucket, Bamboo, Crowd, Crucible en Fisheye. De kwetsbaarheid betreft een Arbitrary File Access-probleem waarmee ongeauthenticeerde aanvallers specifieke bestanden binnen de rootdirectory van de webapplicatie kunnen benaderen. Exploitatie vereist kennis van het exacte bestandspad en de bestandsnaam. Hierdoor kunnen mogelijk gevoelige…
De multiples vulnérabilités ont été découvertes dans les produits Atlassian. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données.
Aggiornamenti di sicurezza Atlassian sanano alcune vulnerabilità, di cui una con gravità "alta", che interessano il prodotto Crowd Data Center. Tale vulnerabilità, qualora sfruttata, potrebbe consentire, a un utente malintenzionato non autenticato, di eludere i meccanismi di autenticazione e ottenere accesso a funzionalità o risorse riservate sui sistemi interessati.