Atlassian’s Path Expectations

CVE-2026-21589 lets unauthenticated attackers read known files from eight self-hosted Atlassian Data Center products when exact paths are known. Upgrade immediately; if delayed, restrict internet exposure and apply Atlassian’s temporary mitigation.