
Hackers exploit Atlassian zero-day within two hours of public exploit code
CVE-2026-21589 lets attackers pull files from self-hosted Jira, Confluence, and Bitbucket servers with no login required. Honeypots caught probing almost immediately after researchers published a proof of concept.










