Skip to content
feed: live about
>_ 0dayNews
Vendor

Atlassian

Vulnerabilities in Atlassian Confluence, Jira, and Bitbucket — frequent ransomware-precursor targets due to the sensitive internal documentation they host.

CVEs
CVE-2023-22515
[ CRITICAL ] CVSS 10.0 kev

Atlassian Confluence Data Center and Server Broken Access Control

A broken-access-control vulnerability in Atlassian Confluence Data Center and Server allows a remote, unauthenticated attacker to create unauthorized Confluence administrator accounts and gain full access to affected instances.

Atlassian / Confluence Data Center and Server
CVE-2022-26134
[ CRITICAL ] CVSS 9.8 kev

Atlassian Confluence OGNL Injection Remote Code Execution

An unauthenticated OGNL (Object-Graph Navigation Language) injection vulnerability in Atlassian Confluence Server and Data Center allows remote code execution on any accessible Confluence instance, with no authentication required.

Atlassian / Confluence Server and Data Center
Articles
~/articles/2026-07-03-confluence-ognl-injection-cve-2022-26134
The Confluence Bug That Went From Zero-Day to Mass Ransomware Precursor in Days
Explainer
atlassian

The Confluence Bug That Went From Zero-Day to Mass Ransomware Precursor in Days

CVE-2022-26134 gave unauthenticated attackers remote code execution on any exposed Confluence instance — and became a go-to foothold for ransomware operators within days of disclosure.

read →