Atlassian flaw added to US exploited-vulnerabilities list — but the details are suspiciously thin

CVE-2026-21589 is confirmed to be under active attack, yet neither CISA nor NVD has said which Atlassian product it hits or how — here's what we actually know.