CVE-2026-21589
Named by 10 kept items in this workspace.
8 items name it under cves and 2 under classification.key entities.
Search every workspace for CVE-2026-21589. It matches the name as written, so it can find other things that share it.
The items that name it 10
Critical vulnerability in Atlassian self-hosted Data Center products, CVSS 9.3, disclosed October 5. Allows remote, unauthenticated attackers to access specific files in the web application's root directory; exploitation requires prior knowledge of the target file's exact name and path; cannot be us
Critical unauthenticated arbitrary file access vulnerability in multiple Atlassian Data Center products; CVSSv4 score 9.3; associated weakness CWE-552 (files or directories accessible to external parties); path traversal in web-resource handling where double-colon (::) sequences can become path sepa
Arbitrary file access vulnerability exploitable without authentication to access specific files in the web application root directory; requires prior knowledge of target file's exact name and path; does not allow enumeration or listing of directory contents.
Critical unauthenticated arbitrary file access (path traversal) flaw in Atlassian self-managed products, published Oct 5, 2026
All cves in this workspace.