https://reddit.com/r/netsec/comments/1wz82op/you_wont_hear_about_these_even_in_myths_atlassian/: You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) - watchTowr Labs
Published Oct 6, 2026
·Updated
Affected Software
2 affected components
Atlassian Jira
Atlassian Confluence
Frequently Asked Questions
1
Does exploitation require an authenticated account?
The issue is characterized as pre-auth, indicating that authentication is not required to exploit it.