Hackers exploit critical Atlassian flaw after public PoC release

What happened

A critical vulnerability (CVE-2026-21589 (the public catalogue number for a specific software flaw)) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. Atlassian is a software company based in Sydney, founded in 2002, which employed about 8,200 people in 2022, and its products and services include productivity software.