Research · Oct 14, 2026
Critical Path Traversal Vulnerability Discovered in Atlassian Jira Server and Data Center
A critical path traversal vulnerability has been identified in Atlassian's Jira Server and Data Center, designated as CVE-2021-26086. This vulnerability poses a significant risk, with a high likelihood of exploitation within the next 30 days.
What changed
xml endpoint, potentially leading to unauthorized data exposure. 1.
Who is affected
Organizations using affected versions are at considerable risk, as the vulnerability could be leveraged to gain access to critical system files that may contain sensitive information. Immediate action is recommended for users to update their systems to the latest versions to mitigate this security threat.
What it means
Failure to address this vulnerability could result in severe data breaches and compromise the integrity of the affected systems.