Atlassian Scanner Now Available to Check Exposure to Last Week’s Critical File Access Flaw (CVE-2026-21589)

Scope: Atlassian Data Center products, including Jira, Confluence, Bitbucket, Bamboo, Crowd, FishEye, and Crucible

Severity: Red

We flagged CVE-2026-21589 last week when it moved from disclosed to actively exploited within hours of a public proof of concept. Since then, watchTowr, the firm that published that proof of concept, has also released a free scanner tool so administrators can check whether their own instance is vulnerable without needing to reverse-engineer the exploit themselves. If this flaw is still unpatched in your environment, running the scanner is a fast way to confirm exposure while the patch is being rolled out, and if it is already patched, running it anyway closes the loop on whether any earlier scanning activity reached your instance.

The Uganda National CERT and Coordination Center (CERT.UG/CC) encourages users and administrators to review the recommendations and apply the necessary updates.