CVE-2021-26084: Atlassian Confluence Server and Data Center Object-Graph

Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability. Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code.

• CISA KEV-listed (remediation due 2021-11-17)
• used in ransomware campaigns
• EPSS 100.0% (100.0% percentile)
• CVSS 9.8 critical

Detection rules

• Potential Atlassian Confluence CVE-2021-26084 Exploitation Attempt high
• Potential CVE-2021-26084 Exploitation Attempt high
• Java Payload Strings high

Linked threat actors

• Cerber

Browse the CVE database

Read the full analysis on IntelFusions