CVE-2021-26084
KEV RANSOMWARECRITICAL 9.8EPSS 100.0%
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are before version 6.13.23, from version 6.14.0 before 7.4.11, from version 7.5.0 before 7.11.6, and from version 7.12.0 before 7.12.5.
- Affected
- Atlassian · Confluence Server · Confluence Data Center
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 100.00% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2021-11-03, used in ransomware campaigns
- Nuclei
- critical · CWE-917
- Published
- 2021-08-30
- Updated
- 2025-12-16
Proof-of-concept exploits (38)
- http://packetstormsecurity.com/files/167449/Atlassian-Confluence-Namespace-OGNL-Injection…
- 0xf4n9x/CVE-2021-2608472★ · 2022-02-10
- 1ZRR4H/CVE-2021-2608430★ · 2021-09-07
- 30579096/Confluence-CVE-2021-260840★ · 2021-09-03
- AnonymouID/POC2★ · 2022-04-25
- CrackerCat/CVE-2021-260840★ · 2021-09-01
- GlennPegden2/cve-2021-26084-confluence1★ · 2021-09-07
- JKme/CVE-2021-260845★ · 2021-09-01
- Jeromeyoung/CVE-2021-260860★ · 2021-09-04
- Jun-5heng/CVE-2021-260841★ · 2022-04-18
- Loneyers/CVE-2021-260843★ · 2021-09-03
- TheclaMcentire/CVE-2021-26084_Confluence1★ · 2021-09-08
- Vulnmachines/Confluence_CVE-2021-260848★ · 2022-07-29
- Xc1Ym/cve_2021_260840★ · 2021-09-03
- ZZ-SOCMAP/CVE-2021-260849★ · 2022-01-14
- ZZ-SOCMAP/Pocs-Exps2★ · 2023-11-10
- antx-code/CVE-2021-260849★ · 2022-01-14
- attacker-codeninja/CVE-2021-260840★ · 2021-09-09
- b1gw00d/CVE-2021-260840★ · 2021-09-01
- bcdannyboy/CVE-2021-26084_GoPOC1★ · 2021-09-01
- byteofandri/CVE-2021-260844★ · 2022-01-27
- byteofjoshua/CVE-2021-260844★ · 2022-01-27
- carlosevieira/CVE-2021-2608421★ · 2021-09-01
- crowsec-edtech/CVE-2021-2608421★ · 2021-09-01
- dinhbaouit/CVE-2021-2608453★ · 2021-09-01
- h3v0x/CVE-2021-26084_Confluence316★ · 2025-02-11
- hev0x/CVE-2021-26084_Confluence316★ · 2025-02-11
- lleavesl/CVE-2021-260847★ · 2021-10-27
- ludy-dev/CVE-2021-26084_PoC3★ · 2021-09-21
- maskerTUI/CVE-2021-260840★ · 2021-09-02
- nahcusira/CVE-2021-260841★ · 2024-05-06
- orangmuda/CVE-2021-260844★ · 2022-01-27
- prettyrecon/CVE-2021-26084_Confluence1★ · 2021-09-01
- smallpiggy/cve-2021-26084-confluence0★ · 2021-09-02
- taythebot/CVE-2021-260848★ · 2021-09-08
- wdjcy/CVE-2021-260840★ · 2021-10-02
- wolf1892/confluence-rce-poc0★ · 2021-09-04
- alt3kx/CVE-2021-26084_PoC53★ · 2021-09-01
Nuclei templates (1)
Metasploit modules (1)
ExploitDB entries (1)
Vulhub environments (1)
Exploit collections (2)
- confluence-cve-2021-26084.ymlchaitin/xray
- CVE-2021-26084.yamlzan8in/afrog