Critical Vulnerability in Multiple Atlassian Products

CERT-EU reported a critical arbitrary file access vulnerability affecting multiple Atlassian products. CVE-2026-21589 allows an unauthenticated attacker to access specific files within the web application root directory when the exact file name and path are known in advance.