Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcritical

Criminal IP analysis report on zero-day vulnerability in Atlassian Confluence

Help Net Securityby @helpnetsecurity ()4 min read1
Read at helpnetsecurity.com
Analyze CVE-2022-26134 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2022-26134
Tags
cve-2022-26134exploit

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-26134
Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center
9.8100%KEVRansomwarePoC ×2
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
ipv4156.146.34.9VPN 64.64.228.239 VPN 66.115.182.102 VPN 66.115.182.111 VPN 156.146.34.9 Tor One of the 15 Confluence zero-day exploit cases release
ipv4156.146.56.136tagged as VPN on Criminal IP. One Tor IP is also detected. 156.146.56.136 VPN 198.147.22.148 VPN 59.163.248.170 VPN 64.64.228.239 VPN
ipv4198.147.22.148riminal IP. One Tor IP is also detected. 156.146.56.136 VPN 198.147.22.148 VPN 59.163.248.170 VPN 64.64.228.239 VPN 66.115.182.102 VPN
ipv459.163.248.170IP is also detected. 156.146.56.136 VPN 198.147.22.148 VPN 59.163.248.170 VPN 64.64.228.239 VPN 66.115.182.102 VPN 66.115.182.111 VPN
ipv464.64.228.239d. 156.146.56.136 VPN 198.147.22.148 VPN 59.163.248.170 VPN 64.64.228.239 VPN 66.115.182.102 VPN 66.115.182.111 VPN 156.146.34.9 Tor
ipv466.115.182.102VPN 198.147.22.148 VPN 59.163.248.170 VPN 64.64.228.239 VPN 66.115.182.102 VPN 66.115.182.111 VPN 156.146.34.9 Tor One of the 15 Confl
ipv466.115.182.111VPN 59.163.248.170 VPN 64.64.228.239 VPN 66.115.182.102 VPN 66.115.182.111 VPN 156.146.34.9 Tor One of the 15 Confluence zero-day expl

From the original article

4 min read at helpnetsecurity.com

According to Volexity, a webshell was discovered in Atlassian Confluence server during an incident response investigation. Volexity determined that it was a zero-day vulnerability that could execute remote code even after the latest patch was completed and reported the issue to Atlassian.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.