CVE-2021-26085Used in ransomware
Atlassian Confluence Server
Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
What it is
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Atlassian entries on the list
- Multiple Products Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability CVE-2026-21589 · Oct 15, 2026
- Jira Server and Data Center Atlassian Jira Server and Data Center Path Traversal Vulnerability CVE-2021-26086 · Nov 12, 2024
- Confluence Data Center and Server Atlassian Confluence Data Center and Server Template Injection Vulnerability CVE-2023-22527 · Jan 24, 2024
- Confluence Data Center and Server Atlassian Confluence Data Center and Server Improper Authorization Vulnerability CVE-2023-22518 · Nov 7, 2023
- Confluence Data Center and Server Atlassian Confluence Data Center and Server Broken Access Control Vulnerability CVE-2023-22515 · Oct 5, 2023
- Bitbucket Server and Data Center Atlassian Bitbucket Server and Data Center Command Injection Vulnerability CVE-2022-36804 · Sep 30, 2022