VulnerabilitycriticalExploited in the wild

Unpatched critical Atlassian Confluence Zero

Security Affairsby @securityaffairsJun 3, 2022 · 10:13 UTC (Jun 3, 2022)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2022-26134 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-26134 CVE-2021-26084

Tags: cve-2022-26134 cve-2021-26084 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-26084	Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability	9.8	100%	KEVRansomwarePoC	Aug 30, 2021 KEV Nov 3, 2021
CVE-2022-26134	Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center	9.8	100%	KEVRansomwarePoC ×2	Jun 3, 2022 KEV Jun 2, 2022

From the original article

2 min read at securityaffairs.com

Atlassian warned of an actively exploited critical unpatched remote code execution flaw (CVE-2022-26134) in Confluence Server and Data Center products. Atlassian is warning of a critical unpatched remote code execution vulnerability affecting all Confluence Server and Data Center supported versions, tracked as CVE-2022-26134, that is being actively exploited in attacks in the wild.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.