$ cve CVE-2022-26134 JSON

CVE-2022-26134 KEV EXPLOIT

9.8

CRITICAL · CVSS 3.1 · EPSS 100% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2022-06-06.

Description

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.

Scoring

CVSS	9.8 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	100% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-917
On CISA KEV	yes — remediate by 2022-06-06
Public exploit	yes
Published	2022-06-03
Last modified	2026-06-17

CISA KEV

Name	Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
Added	2022-06-02
Due	2022-06-06
Vendor / product	Atlassian / Confluence Server/Data Center
Ransomware use	known

Affected (2)

Vendor	Product
atlassian	confluence data center
atlassian	confluence server

Public exploits

Source	Title	Date
exploit-db	Confluence Data Center 7.18.0 - Remote Code Execution (RCE)	2022-06-10

References

→ the Explorer · watch your stack · NVD