CVE-2026-21571 | Atlassian Bamboo Data Center up to 9.6.24/10.2.17/12.1.5 Release Note os command injection

A vulnerability classified as critical was found in Atlassian Bamboo Data Center up to 9.6.24/10.2.17/12.1.5. This vulnerability affects unknown code of the component Release Note Handler. Such manipulation leads to os command injection.

This vulnerability is documented as CVE-2026-21571. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.