# Atlassian file-access flaw draws exploitation attempts as fixes become available

_Published Wednesday, October 7, 2026 at 9:07 AM EDT · Security · Latest · Tier 1 — Major_

![Atlassian file-access flaw draws exploitation attempts as fixes become available — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEityRbZfy1N9Y0SuqWl7yeWTYMjeirrTbDx719fM65Be6yXOt2Zl0YweAi0hAfswNzV_LrHa4eFCpcCemC3FNwxZve4bPkSelQiRnCdXpZofAnI7Si96nULBV6i25jgFaZkEY1T3LuPRhj6QzTSsWHZtLuoH1zXlLKZN3WwSiKS7QoY_Zug0CtaaCGozT6N/s1700-nu-rw-lo-l85-e365/jira-attack.jpg)

Previdian detected 15 exploitation attempts against its honeypots from three IP addresses after technical details emerged for CVE-2026-21589, a critical file-access flaw affecting multiple Atlassian Data Center products. Attempts began within two hours of watchTowr publishing additional details.

The flaw lets unauthenticated attackers retrieve specific files inside an application's web root by abusing resource-path handling. In Crowd and Jira, exposed Crowd credentials could enable administrative access. Atlassian says fixes are available for affected products and impacted Cloud products have been patched. Attackers must know a target file's exact name and path; the flaw cannot list directory contents.

## Sources

- [The Hacker News](https://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html)

---
Canonical: https://techandbusiness.org/newswire/NvZsWcB264ER7ozVYt0DGm
Published: 2026-10-07T13:07:01.574Z
Story chronology: 2026-10-07T11:49:26.000Z
Retrieved: 2026-10-07T15:39:09.372Z
Publisher: Tech & Business (techandbusiness.org)