Hackers are actively exploiting a critical vulnerability, identified as CVE-2026-21589, across multiple Atlassian product families, including Jira, Confluence, and Bitbucket. This exploit does not require any form of authentication, significantly lowering the barrier for malicious actors.
Reports mentioning Confluence
Atlassian has issued a critical vulnerability warning to its customers regarding a flaw that allows for arbitrary file access in multiple self-hosted Data Center products. The vulnerability, tracked as CVE-2026-21589, affects widely used Atlassian applications including Confluence, Jira Software…
Atlassian and OpenAI have announced an expansion of their strategic partnership, focusing on integrating OpenAI's advanced artificial intelligence models with Atlassian's suite of enterprise software products. This collaboration aims to empower teams by connecting their internal knowledge bases with powerful…
A critical security vulnerability has been identified in Atlassian's AI assistant, which could allow attackers to exfiltrate sensitive data from Jira tickets and Confluence documents. The flaw exploits hidden text embedded within PDF files, a technique that circumvents standard security…
Atlassian's Rovo assistant, an AI-powered tool designed to streamline workflows by integrating with Jira and Confluence, has been found to be vulnerable to data exfiltration attacks. Security researchers have demonstrated that attacker-controlled instructions, embedded within content that Rovo processes, can…