TLDR Tech / News
Atlassian products face critical file access flaw
Atlassian has issued a security alert for CVE-2026-21589, a severe vulnerability allowing unauthenticated access to arbitrary files in eight of its products. The flaw, rated 9.3 on the CVSSv4 scale, stems from double-colon sequences being misinterpreted as path separators during request handling, enabling access to resource-loading code. Rapid7 advises immediate patching and review of access logs for signs of compromise.
Read the full story