Security Advisory 10/2026

Incident Report for Communardo Service Center

Resolved

Dear customers,

after a thorough analysis of Atlassian's latest Security Advisory, we recommend to patch all affected Applications to a fixed version.

Security Advisory: https://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html

Affected Applications: Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira

Note: This is our general assessment and you should evaluate its applicability to your own IT environment. We only investigate/evaluate actively maintained LTS releases (except for Crowd & Fisheye/Crucible). If you are using a non-LTS release, please check additionally for your version or contact us via our Service Center.

If we are hosting your systems or proactively update your applications, we will directly communicate any information via tickets (which will be created soon) in our service center.

In case you have additional questions, please open a request in our Communardo Service Center:
https://communardo.atlassian.net/servicedesk/customer/portal/6

Best regards,
Your Communardo Team

Posted Oct 06, 2026 - 09:18 CEST

This incident affected: Atlassian-Security (Security Status Bamboo, Security Status Bitbucket, Security Status Confluence, Security Status Crucible/Fisheye, Security Status Jira).