{"uuid": "5a1fb34d-72a7-4dbe-92c3-33378eb9a483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21589", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117398806855479240", "content": "Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products\nAtlassian disclosed CVE-2026-21589 on Oct. 5, a critical flaw (CVSS 9.3) affecting eight self-hosted Data Center products that lets an unauthenticated attacker read specific files in each product\u2019s web application root. The attacker must already know a file\u2019s exact name and path and cannot list directory contents, The Hacker News reports. https://thehackernews.com/2026/10/critical-atlassian-flaw-lets.html", "creation_timestamp": "2026-10-07T09:00:30.466729Z"}