CISA adds an Atlassian vulnerability to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Atlassian vulnerability CVE-2026-21589, a critical arbitrary file access flaw, to its Known Exploited Vulnerabilities catalog. The source states that exploitation began in early October.