Skip to content
Back to search

CVE-2022-26134

CRITICAL
9.8 RansomwareNVD

Summary

generated automatically from NVD data

Atlassian Confluence Server and Data Center contain an OGNL injection flaw (CWE-917) that lets an unauthenticated attacker execute arbitrary code on the instance. It affects versions from 1.3.0 up to several 7.x branches, ending before 7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4 and 7.18.1 respectively. The flaw is rated CRITICAL with a CVSS v3.1 score of 9.8, and CISA lists it in its KEV catalog, noting known use in ransomware campaigns.

NVD description

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.

Share:

⚠️ Actively exploited — CISA KEV

This CVE was added to CISA's Known Exploited Vulnerabilities catalog on 2022-06-02. It is confirmed exploited in the wild and must be patched as a priority.

Remediation deadline (US federal agencies): 2022-06-06

Used in known ransomware campaigns.

EPSS · FIRST.org

100.0%probability of exploitation in the next 30 days

Higher than 99% of scored CVEs

EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-16, recomputed daily by FIRST.org.

In-depth analysis on cveo.tech

We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.

CVSS v3.1 Score

9.8
/ 10.0
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Information

Published
3 juin 2022
Updated
17 juin 2026
Status
Analyzed
Source
security@atlassian.com

Affected products

atlassian confluence data center
Versions : 7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4
atlassian confluence server
Versions : 7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4

Weaknesses (CWE)

CWE-917CWE-917

References (13)

Similar CVEs

Other vulnerabilities of type CWE-917

…

Monitor your products

Get automatic alerts for every new CVE affecting your equipment.

Enable monitoring