#Jira
All CosmicBytez Labs articles tagged #Jira, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
Pre-auth path traversal flaw (CVSS 9.3) exposes files in 8 Atlassian Data Center products; CISA confirms active exploitation.
- News
Hackers Exploit Critical Atlassian Flaw After Public PoC Release
Active exploitation of Atlassian's CVE-2026-21589 began within 2 hours of a public PoC, hitting Jira, Confluence, and Bitbucket Data Center.
- News
Atlassian Patches Critical Arbitrary File Access Flaw Affecting 8 Products
CVE-2026-21589 (CVSS 9.3) lets unauthenticated attackers read specific files on Bitbucket, Confluence, Jira, and five other Atlassian Data Center products.
- News
Atlassian Warns of Critical File-Access Flaw in Jira, Confluence
CVE-2026-21589 (CVSS 9.3) lets unauthenticated attackers read files in Jira, Confluence, Bitbucket and five more Data Center products.
- News
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
Two independent security firms found that Atlassian's AI assistant Rovo is vulnerable to indirect prompt injection attacks that silently exfiltrate Jira...