CVE-2021-26084

Summary

CVE-2021-26084 is a critical vulnerability affecting Confluence Server and Data Center versions before 6.13.23, 6.14.0-7.4.10, 7.5.0-7.11.5, and 7.12.0-7.12.4. An attacker can exploit this OGNL injection vulnerability without authentication to execute arbitrary code on impacted Confluence instances. This poses a significant risk to Confluence users, as successful exploitation could lead to data theft, unauthorized system access, or system compromise. Upgrading to the latest versions of Confluence is recommended to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.