Threat Brief: CVE-2021-26084
Summary: On Aug. 25, 2021, Atlassian released a security advisory for an injection vulnerability, CVE-2021-26084, in Confluence Server and Data Center that could let threat actors bypass authentication and run arbitrary code on unpatched systems. Since the advisory, mass scanning for unpatched systems has begun and in-the-wild exploitation has started, while Confluence Cloud customers are not affected.
Bottom line: Exploitation is already underway and automated scanning is hunting unpatched Confluence servers, so any instance still on an older release is a live target rather than a theoretical one.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-26084
- Related
- CVE-2021-26084: Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021Threat Source newsletter (Sept. 9, 2021) Cyber Risks ·Gaining Visibility Within Container Clusters Cyber Risks ·