Patching Atlassian software comes down to five steps. Read the current advisory. Match each of your installations to its affected and fixed versions. Upgrade every instance and node to a fixed release or later. Confirm the running version. Then test the application. Only self-managed products need this work. Atlassian patches Cloud itself.
This guide uses Atlassian’s newest critical multi-product advisory, CVE-2026-21589, released October 5, 2026, as a worked example. The version numbers below belong to that advisory and can change. The method applies to any later one.
What CVE-2026-21589 is and who must act
Atlassian rates this issue Critical, CVSS 9.3 (CVSS 4.0). That score is Atlassian’s own assessment, and the advisory tells readers to judge applicability in their own environment. An unauthenticated attacker can access specific files within the web application root directory. The attacker needs advance knowledge of the target file’s exact name and path. The flaw does not allow listing or enumerating directory contents. Some configurations may expose sensitive files, which raises the risk.
The advisory says all versions of these Data Center products are affected:
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
- Bitbucket Data Center
- Confluence Data Center
- Jira Service Management Data Center
- Jira Software Data Center
- Bamboo Data Center
- Crowd Data Center
- Crucible
- Fisheye
Cloud versus self-managed
Atlassian’s security FAQ explains that its monthly security bulletins cover Server and Data Center products. Atlassian deploys Cloud fixes itself. The advisory states: “Affected Atlassian Cloud products have been patched, and our investigation has not found evidence of exploitation. No Cloud customer action is required.” Cloud administrators should not install Data Center versions. Data Center administrators need to act now.
Fixed versions in the October 5, 2026 advisory
| Product | Fixed versions named in the advisory |
|---|---|
| Bitbucket Data Center | 9.4.26, 10.2.8, 10.5.1 |
| Confluence Data Center | 9.2.26, 10.2.19 |
| Jira Service Management Data Center | 5.12.40, 10.3.26, 11.3.12 |
| Jira Software Data Center | 9.12.40, 10.3.26, 11.3.12 |
| Bamboo Data Center | 10.2.24, 12.1.12 |
| Crowd Data Center | 6.3.7, 7.0.3, 7.1.7, 7.2.4 |
| Crucible | 4.9.15 |
| Fisheye | 4.9.15 |
Atlassian recommends patching to a fixed LTS version or later. It also says to patch each installation to a fixed version or the latest version. Before you schedule a change, re-check the live advisory, release notes, upgrade path and support matrix. These values are a snapshot from October 5.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
Step-by-step: patch and verify
1. Inventory every installation
List each Atlassian product, its deployment type (Cloud or self-managed/Data Center), its installed version, and every cluster node and mirror. Compare each entry with the advisory’s affected and fixed tables. In this advisory every version of the listed Data Center products is affected, so the question is which fixed line you can move to.
2. Choose a supported upgrade path
- Read the release notes and upgrade notes for your product and the target version.
- Confirm platform and app (marketplace plugin) compatibility.
- Run any pre-upgrade planning and health checks the product offers.
- Back up the instance and its database.
- Use the same installation method you originally used. Atlassian’s Jira 11 documentation says the binary installer is not supported for an installation originally installed manually from a zip archive.
Follow the guide for your own product and version. The Jira mechanics are documented for Jira only, and other products can differ.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
3. Upgrade every affected installation
Move to a fixed version listed for your product, or to a later release that includes the fix. In a cluster, follow that product’s documented procedure and cover every node. The advisory says cluster mitigations must be applied to all nodes. It also calls out Bitbucket mirrors and mirror farm nodes, so include those.
4. If you cannot patch immediately, reduce exposure
Atlassian’s first recommendation is to remove the instance from the internet where possible. That includes externally accessible instances that require authentication. The advisory also gives product-specific temporary mitigations, such as WAF or proxy filtering and application URL rewrite rules. Copy the exact rule and placement from the advisory, and do not paraphrase a regular expression. These are stopgaps and are not equivalent to installing the fixed version.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
5. Verify the result
- Check the running product version on every instance and node against the fixed-version table. Do this on the live system, not in the installer you used.
- For Jira Data Center, open Administration > System > System info > Cluster nodes and confirm the upgraded nodes have rejoined. Menu names for other products and releases may differ.
- Confirm all nodes load as expected.
- Run smoke tests or your service’s test suite. Atlassian’s zero-downtime upgrade checklist for Jira includes nodes rejoining, the application loading as expected, and smoke tests or a test suite.
- If you applied a mitigation in the interim, remove or retire it only according to the advisory’s guidance once the fix is confirmed.
6. Record completion and handle incident questions
Keep the advisory ID, old and new versions, node coverage, maintenance window, health-check output and test results. A version check proves what is deployed now. It does not show whether anyone accessed files before the patch. The advisory reports no evidence of exploitation on Cloud, but it makes no such statement about self-managed installations. If you suspect compromise, run your incident response process. Review web server and proxy logs for requests to unexpected file paths. Consider rotating any credentials stored in files under the web root.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Decision guide
| Question | If yes | If no |
|---|---|---|
| Is the product on Atlassian Cloud? | No action for this advisory; Atlassian has patched it. | Continue with the steps above. |
| Is your version at or above a fixed version for your product line? | Verify and document it. | Upgrade to a fixed version or later. |
| Can you patch in the near term? | Patch, then verify every node. | Take the instance off the internet or apply the advisory’s mitigation, and schedule the patch. |
| Is it a cluster or does it use mirrors? | Cover every node and mirror. | Patch the single instance. |
Where to check next time
Atlassian publishes security advisories through its security advisory index and explains its disclosure policy in the security FAQ. Check there for later bulletins, and always use the version table in the specific advisory rather than one from an earlier month.
Quick Recap
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
