Lucene search
CISACISA:D7188D434879621A3A83E708590EAE42HistorySep 03, 2021 - 12:00 a.m.
Atlassian Releases Security Updates for Confluence Server and Data Center
2021-09-0300:00:00
us-cert.cisa.gov
41
0.974 High
EPSS
Percentile
100.0%
On August 25, 2021, Atlassian released security updates to address a remote code execution vulnerability (CVE-2021-26084) affecting Confluence Server and Data Center. Recently, CVE-2021-26084 has been detected in exploits in the wild. A remote attacker could exploit this vulnerability to take control of an affected system.
CISA urges users and administrators to review Atlassian Security Advisory 2021-08-25 and immediately apply the necessary updates.
This product is provided subject to this Notification and this Privacy & Use policy.
Please share your thoughts.
We recently updated our anonymous product survey; we’d welcome your feedback.
Related
githubexploit
githubexploit
Exploit for Injection in Atlassian Confluence
2021-09-07 01:15:16
Exploit for Injection in Atlassian Confluence Server
2021-09-04 13:32:42
cvelist
cvelist
CVE-2021-26084
2021-08-10 00:00:00
thn
thn
Atlassian Confluence RCE Flaw Abused in Multiple Cyberattack Campaigns
2021-09-28 15:31:00
Latest Atlassian Confluence Flaw Exploited to Breach Jenkins Project Server
2021-09-07 10:05:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-10-22 14:25:55
Active Exploitation of Confluence Server & Confluence Data Center: CVE-2021-26084
2021-09-02 15:44:36
Metasploit Wrap-Up
2021-09-10 18:32:40
prion
prion
Code injection
2021-08-30 07:15:00
nuclei
nuclei
Confluence Server - Remote Code Execution
2021-08-31 20:40:27
attackerkb
attackerkb
CVE-2021-26084 Confluence Server OGNL injection
2021-08-10 00:00:00
checkpoint_advisories
checkpoint_advisories
Atlassian Confluence Remote Code Execution (CVE-2021-26084)
2021-09-05 00:00:00
atlassian
atlassian
Confluence Server Webwork OGNL injection - CVE-2021-26084
2021-07-27 05:13:48
RCE on Confluence Data Center via OGNL Injection - CVE-2021-39114
2021-08-27 03:55:57
Confluence Server Webwork OGNL injection - CVE-2021-26084
2021-07-27 05:13:48
nessus
nessus
zdt
zdt
Confluence Server 7.12.4 - (OGNL injection) Remote Code Execution Exploit
2021-09-01 00:00:00
Atlassian Confluence WebWork OGNL Injection Exploit
2021-09-10 00:00:00
Atlassian Confluence Namespace OGNL Injection Exploit
2022-06-09 00:00:00
trendmicroblog
trendmicroblog
hackerone
hackerone
U.S. Dept Of Defense: RCE on ███████ [CVE-2021-26084]
2021-09-02 02:58:10
U.S. Dept Of Defense: RCE in ███ [CVE-2021-26084]
2021-09-02 05:49:27
nvd
nvd
CVE-2021-26084
2021-08-30 07:15:06
cve
cve
CVE-2021-26084
2021-08-30 07:15:06
akamaiblog
akamaiblog
cisa_kev
cisa_kev
packetstorm
packetstorm
Confluence Server 7.12.4 OGNL Injection Remote Code Execution
2021-09-01 00:00:00
Atlassian Confluence WebWork OGNL Injection
2021-09-10 00:00:00
Atlassian Confluence Namespace OGNL Injection
2022-06-08 00:00:00
metasploit
metasploit
Atlassian Confluence WebWork OGNL Injection
2021-10-14 21:58:04
exploitdb
exploitdb
impervablog
impervablog
2021 in Review, Part 2: 5 Top Cybersecurity Stories
2021-12-29 12:03:19
New Sysrv Botnet Variant Makes Use of Google Subdomain to Spread XMRig Miner
2024-03-20 16:56:29
Attackers Quick to Weaponize CVE-2023-22527 for Malware Delivery
2024-02-21 09:28:01
threatpost
threatpost
Log4JShell Used to Swarm VMware Servers with Miners, Backdoors
2022-03-29 20:33:08
Jenkins Hit as Atlassian Confluence Cyberattacks Widen
2021-09-07 16:07:58
Zoho ManageEngine Password Manager Zero-Day Gets Fix
2021-09-09 12:58:48
hivepro
hivepro
Cerber targeting organizations with publicly available exploits
2021-12-14 13:50:15
malwarebytes
malwarebytes
Update now! Atlassian Confluence vulnerability is being actively exploited
2023-10-12 04:00:00
The top 5 most routinely exploited vulnerabilities of 2021
2022-04-29 16:28:20
2022's most routinely exploited vulnerabilities—history repeats
2023-08-07 18:30:00
mssecure
mssecure
mmpc
mmpc
avleonov
avleonov
github
github
Bypassing OGNL sandboxes for fun and charities
2023-01-27 16:00:49
qualysblog
qualysblog
Qualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities
2023-08-24 19:07:05
CISA Alert: Top 15 Routinely Exploited Vulnerabilities
2022-05-06 12:19:24
googleprojectzero
googleprojectzero
2022 0-day In-the-Wild Exploitation…so far
2022-06-30 00:00:00
ics
ics
Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors
2022-10-06 12:00:00
2021 Top Routinely Exploited Vulnerabilities
2022-04-28 12:00:00
2022 Top Routinely Exploited Vulnerabilities
2023-08-03 12:00:00
securelist
securelist
IT threat evolution in Q3 2021. PC statistics
2021-11-26 12:00:36