Known Exploited Vulnerabilities March 28, 2022 · CISA KEV Catalog

CVE-2021-26085: Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

AtlassianCVE-2021-26085

Related

CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Known Exploited Vulnerabilities · Oct 15, 2026

CVE-2021-26086: Atlassian Jira Server and Data Center Path Traversal Vulnerability Known Exploited Vulnerabilities · Nov 12, 2024

CVE-2023-22527: Atlassian Confluence Data Center and Server Template Injection Vulnerability Known Exploited Vulnerabilities · Jan 24, 2024