Atlassian CVE-2026-21589: one unauthenticated request reads the file that trusts everyone

How a shared webresource router let an unauthenticated attacker read Crowd credentials across eight Atlassian Data Center products.