Known Exploited Vulnerabilities July 29, 2022 · CISA KEV Catalog

CVE-2022-26138: Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability

Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated attacker can use these credentials to log into Confluence and access all content accessible to users in the confluence-users group.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Atlassian CVE-2022-26138
Related: CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Known Exploited Vulnerabilities · Oct 15, 2026
CVE-2021-26086: Atlassian Jira Server and Data Center Path Traversal Vulnerability Known Exploited Vulnerabilities · Nov 12, 2024
CVE-2023-22527: Atlassian Confluence Data Center and Server Template Injection Vulnerability Known Exploited Vulnerabilities · Jan 24, 2024