Atlassian has issued an urgent warning about a critical vulnerability affecting its datacenter products. The flaw, CVE-2026-21589, has a severity rating of 9.3 and allows unauthenticated attackers to access specific files within the web application root directory. The vulnerability impacts datacenter versions of Bitbucket, Confluence, Jira Service Management, Jira Software, Bamboo, Crowd, Crucible, and Fisheye. Atlassian warns that sensitive files may be exposed in some configurations. The company has released patches and urges users to upgrade immediately. Those unable to patch quickly should remove instances from the internet until they can apply the fix. Cloud-based Atlassian users are unaffected, as the company has already addressed the vulnerability in its software-as-a-service offering. Atlassian discontinued its datacenter products last year, encouraging users to migrate to its cloud platform.

Atlassian has surged more than 200% from its April low of $57, defying Wall Street's fears that artificial intelligence would devastate software companies. The collaboration software firm posted exceptional results, with fourth-quarter revenue jumping 28% year-over-year to $1.77 billion, beating analyst expectations of $1.66 billion. The company's AI platform, Rovo, embedded into flagship products Jira and Confluence, is driving growth. Annual recurring revenue from Rovo customers is growing at twice the pace of non-Rovo customers. Rovo-powered agents produce 44% more accurate answers whilst consuming 48% fewer tokens. Operating costs rose just 12% despite strong revenue growth, enabling Atlassian to swing to a $139.1 million profit from a year-earlier loss. Adjusted profit soared 83% to $473.1 million. Despite the rally, shares trade at a price-to-sales ratio of 7.1, below the three-year average of 9.8.

Atlassian Corporation (NASDAQ: TEAM), a leading provider of team collaboration and productivity software, today announced it has entered into a definitive ag...