U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog

CISA has added a critical arbitrary file access flaw in Atlassian Data Center products, including Confluence, Jira and Bitbucket (CVE-2026-21589), to its Known Exploited Vulnerabilities catalog, Security Affairs reports. Previdian says exploitation attempts hit its honeypots about two hours after watchTowr published more technical details of the path traversal bug, and federal agencies have until Oct. 18 to patch.