Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

A critical arbitrary file access vulnerability tracked as CVE-2026-21589 with a CVSS score of 9.3 has been disclosed affecting multiple Atlassian Data Center products. The affected products include Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, and Jira Software Data Center. Threat actors began attempting to exploit the flaw within two hours of public disclosure. The vulnerability allows unauthorized access to sensitive files under certain conditions. The rapid exploitation timeline highlights the urgency for organizations to patch affected Atlassian Data Center deployments immediately.