CVE-2022-26134: Atlassian Confluence Server and Data Center Remote Code
Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability. Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.
- CISA KEV-listed (remediation due 2022-06-06)
- used in ransomware campaigns
- EPSS 100.0% (100.0% percentile)
- CVSS 9.8 critical
Detection rules
- Atlassian Confluence CVE-2022-26134 high
- Potential OGNL Injection Exploitation In JVM Based Application high
- Java Payload Strings high
- Confluence Unauthenticated Remote Code Execution CVE-2022-26134