A severe security flaw affecting eight self-hosted Atlassian Data Center products enables unauthenticated attackers to read specific files within the web application root directory. Attackers must know the exact file name and path as directory listing is not supported. Atlassian has released security advisories and patches to address this critical vulnerability.

AtlassianCVE-2026-21589Path TraversalData Center
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →