[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-26134":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-14T16:36:57.460Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":68,"duplicate_of":9,"upstream":69,"downstream":70,"duplicates":71,"related":72,"reserved_at":9,"published_at":73,"modified_at":74,"state":75,"summary":76,"references_raw":84,"kevs":121,"epss":138,"epss_history":141,"metrics":334,"affected":345},"CVE-2022-26134","In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-917","Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')","The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.","weakness","Incomplete","Base",[],[20,29,33,46],{"_key":21,"name":22,"source":23,"url":24,"maturity":25,"reliability_score":26,"verified":27,"type":9,"platforms":28,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_BA92871F9F799938","Exploit Reference (packetstormsecurity.com)","reference","http://packetstormsecurity.com/files/167430/Confluence-OGNL-Injection-Remote-Code-Execution.html","unknown",0.2,false,[],{"_key":30,"name":22,"source":23,"url":31,"maturity":25,"reliability_score":26,"verified":27,"type":9,"platforms":32,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_DA447B0474C177DB","http://packetstormsecurity.com/files/167449/Atlassian-Confluence-Namespace-OGNL-Injection.html",[],{"_key":34,"name":35,"source":36,"url":37,"maturity":38,"reliability_score":39,"verified":27,"type":9,"platforms":40,"requires_auth":9,"exploitdb":42,"metasploit":9},"50952","Confluence Data Center 7.18.0 - Remote Code Execution (RCE)","exploit-database","https://www.exploit-db.com/exploits/50952","poc",0.5,[41],"java",{"verified":27,"type":43,"platform":41,"file":44,"codes":45},"webapps","exploits/java/webapps/50952.py",[7],{"_key":47,"name":48,"source":49,"url":50,"maturity":51,"reliability_score":52,"verified":53,"type":54,"platforms":55,"requires_auth":27,"exploitdb":9,"metasploit":56},"MSF_EXPLOIT_MULTI_HTTP_ATLASSIAN_CONFLUENCE_NAMESPACE_OGNL_INJECTION","Atlassian Confluence Namespace OGNL Injection","metasploit","https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/multi/http/atlassian_confluence_namespace_ognl_injection.rb","weaponized",1,true,"remote",[],{"fullname":57,"rank":58,"rank_name":59,"post_auth":27,"check":53,"notes":60},"exploit/multi/http/atlassian_confluence_namespace_ognl_injection",600,"excellent",{"Stability":61,"SideEffects":63,"Reliability":66},[62],"crash-safe",[64,65],"ioc-in-logs","artifacts-on-disk",[67],"repeatable-session",[],[],[],[],[],"2022-06-03T21:51:57.134Z","2025-10-21T23:15:38.769Z","Analyzed",{"cisa_kev":53,"cisa_ransomware":53,"cisa_vendor":77,"epss_severity":78,"epss_score":79,"severity":78,"severity_score":80,"severity_version":81,"severity_source":82,"severity_vector":83,"severity_status":75},"Atlassian","critical",0.99999,9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[85,94,100,104,108,111,115],{"url":86,"sources":87,"tags":89},"https://jira.atlassian.com/browse/CONFSERVER-79016",[82,88],"nvd",[90,91,92,93],"X Refsource MISC","Issue Tracking","Patch","Vendor Advisory",{"url":95,"sources":96,"tags":97},"http://packetstormsecurity.com/files/167432/Confluence-OGNL-Injection-Proof-Of-Concept.html",[82,88],[90,98,99],"Third Party Advisory","VDB Entry",{"url":24,"sources":101,"tags":102},[82,88],[90,103,98,99],"Exploit",{"url":105,"sources":106,"tags":107},"http://packetstormsecurity.com/files/167431/Through-The-Wire-CVE-2022-26134-Confluence-Proof-Of-Concept.html",[82,88],[90,98,99],{"url":31,"sources":109,"tags":110},[82,88],[90,103,98,99],{"url":112,"sources":113,"tags":114},"https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html",[82,88],[90,93],{"url":116,"sources":117,"tags":118},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26134",[82,88],[119,120],"Government Resource","US Government Resource",[122,128],{"source":123,"vendor":77,"product":124,"date_added":125,"vulnerability_name":9,"short_description":126,"required_action":9,"due_date":9,"known_ransomware_campaign_use":9,"notes":127,"exploitation_type":25},"enisa","Confluence Server, Confluence Data Center","2026-07-31","OGNL injection vulnerability allows an unauthenticated attacker to execute arbitrary code on an instance.","https://socradar.io/blog/snowlight-government-chinese-campaign/",{"source":129,"vendor":77,"product":130,"date_added":131,"vulnerability_name":132,"short_description":133,"required_action":134,"due_date":135,"known_ransomware_campaign_use":136,"notes":137,"exploitation_type":9},"cisa","Confluence Server/Data Center","2022-06-02","Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.","Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.","2022-06-06","Known","https://nvd.nist.gov/vuln/detail/CVE-2022-26134",{"date":139,"score":79,"percentile":140},"2026-08-14",0.99994,[142,146,148,150,152,154,156,158,160,162,166,169,171,173,175,179,181,183,186,188,190,192,194,196,198,200,202,204,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255,257,259,261,263,265,267,270,272,274,276,278,280,282,284,286,288,290,292,294,296,298,300,303,305,307,309,311,313,315,317,319,321,323,325,327,329,331],{"date":143,"score":144,"percentile":145},"2025-11-04",0.94408,0.99974,{"date":147,"score":144,"percentile":145},"2025-11-05",{"date":149,"score":144,"percentile":145},"2025-11-06",{"date":151,"score":144,"percentile":145},"2025-11-07",{"date":153,"score":144,"percentile":145},"2025-11-08",{"date":155,"score":144,"percentile":145},"2025-11-09",{"date":157,"score":144,"percentile":145},"2025-11-10",{"date":159,"score":144,"percentile":145},"2025-11-11",{"date":161,"score":144,"percentile":145},"2025-11-12",{"date":163,"score":164,"percentile":165},"2025-11-13",0.94446,0.9999,{"date":167,"score":144,"percentile":168},"2025-11-14",0.99973,{"date":170,"score":144,"percentile":145},"2025-11-15",{"date":172,"score":144,"percentile":145},"2025-11-16",{"date":174,"score":144,"percentile":145},"2025-11-17",{"date":176,"score":177,"percentile":178},"2025-11-18",0.94369,0.99989,{"date":180,"score":177,"percentile":178},"2025-11-19",{"date":182,"score":177,"percentile":178},"2025-11-20",{"date":184,"score":164,"percentile":185},"2025-11-21",0.99988,{"date":187,"score":164,"percentile":178},"2025-11-22",{"date":189,"score":144,"percentile":168},"2025-11-23",{"date":191,"score":144,"percentile":145},"2025-11-24",{"date":193,"score":144,"percentile":145},"2025-11-25",{"date":195,"score":144,"percentile":145},"2025-11-26",{"date":197,"score":144,"percentile":145},"2025-11-27",{"date":199,"score":144,"percentile":145},"2025-11-28",{"date":201,"score":144,"percentile":168},"2025-11-29",{"date":203,"score":144,"percentile":168},"2025-11-30",{"date":205,"score":144,"percentile":206},"2025-12-01",0.99975,{"date":208,"score":144,"percentile":206},"2025-12-02",{"date":210,"score":144,"percentile":206},"2025-12-03",{"date":212,"score":144,"percentile":145},"2025-12-04",{"date":214,"score":144,"percentile":145},"2025-12-05",{"date":216,"score":144,"percentile":145},"2025-12-06",{"date":218,"score":144,"percentile":145},"2025-12-07",{"date":220,"score":144,"percentile":145},"2025-12-08",{"date":222,"score":144,"percentile":145},"2025-12-09",{"date":224,"score":144,"percentile":145},"2025-12-10",{"date":226,"score":144,"percentile":145},"2025-12-11",{"date":228,"score":144,"percentile":145},"2025-12-12",{"date":230,"score":144,"percentile":145},"2025-12-13",{"date":232,"score":144,"percentile":145},"2025-12-14",{"date":234,"score":144,"percentile":145},"2025-12-15",{"date":236,"score":144,"percentile":145},"2025-12-16",{"date":238,"score":144,"percentile":145},"2025-12-17",{"date":240,"score":164,"percentile":185},"2025-12-18",{"date":242,"score":164,"percentile":185},"2025-12-19",{"date":244,"score":144,"percentile":168},"2025-12-20",{"date":246,"score":144,"percentile":145},"2025-12-21",{"date":248,"score":144,"percentile":145},"2025-12-22",{"date":250,"score":144,"percentile":145},"2025-12-23",{"date":252,"score":144,"percentile":145},"2025-12-24",{"date":254,"score":144,"percentile":206},"2025-12-25",{"date":256,"score":144,"percentile":206},"2025-12-26",{"date":258,"score":144,"percentile":206},"2025-12-27",{"date":260,"score":144,"percentile":206},"2025-12-28",{"date":262,"score":144,"percentile":206},"2025-12-29",{"date":264,"score":144,"percentile":206},"2025-12-30",{"date":266,"score":144,"percentile":206},"2025-12-31",{"date":268,"score":144,"percentile":269},"2026-01-01",0.99977,{"date":271,"score":144,"percentile":269},"2026-01-02",{"date":273,"score":144,"percentile":269},"2026-01-03",{"date":275,"score":144,"percentile":206},"2026-01-04",{"date":277,"score":144,"percentile":206},"2026-01-05",{"date":279,"score":144,"percentile":206},"2026-01-06",{"date":281,"score":144,"percentile":206},"2026-01-07",{"date":283,"score":144,"percentile":206},"2026-01-08",{"date":285,"score":144,"percentile":206},"2026-01-09",{"date":287,"score":144,"percentile":206},"2026-01-10",{"date":289,"score":144,"percentile":206},"2026-01-11",{"date":291,"score":144,"percentile":206},"2026-01-12",{"date":293,"score":144,"percentile":206},"2026-01-13",{"date":295,"score":144,"percentile":206},"2026-01-14",{"date":297,"score":144,"percentile":206},"2026-01-15",{"date":299,"score":144,"percentile":206},"2026-01-16",{"date":301,"score":144,"percentile":302},"2026-01-17",0.99976,{"date":304,"score":164,"percentile":178},"2026-01-18",{"date":306,"score":164,"percentile":178},"2026-01-19",{"date":308,"score":144,"percentile":145},"2026-01-20",{"date":310,"score":144,"percentile":206},"2026-01-21",{"date":312,"score":144,"percentile":206},"2026-01-22",{"date":314,"score":144,"percentile":302},"2026-01-23",{"date":316,"score":144,"percentile":302},"2026-01-24",{"date":318,"score":144,"percentile":302},"2026-01-25",{"date":320,"score":144,"percentile":302},"2026-01-26",{"date":322,"score":144,"percentile":302},"2026-01-27",{"date":324,"score":144,"percentile":302},"2026-01-28",{"date":326,"score":144,"percentile":302},"2026-01-29",{"date":328,"score":144,"percentile":302},"2026-01-30",{"date":330,"score":144,"percentile":302},"2026-01-31",{"date":332,"score":144,"percentile":333},"2026-02-01",0.99978,[335,339],{"source":82,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":336,"cvss_v4_0":9},{"baseScore":80,"baseSeverity":337,"vectorString":83,"impactScore":80,"exploitabilityScore":338},"CRITICAL",10,{"source":88,"cvss_v2_0":340,"cvss_v3_0":9,"cvss_v3_1":344,"cvss_v4_0":9},{"baseScore":341,"baseSeverity":9,"vectorString":342,"impactScore":343,"exploitabilityScore":338},7.5,"AV:N/AC:L/Au:N/C:P/I:P/A:P",6.4,{"baseScore":80,"baseSeverity":337,"vectorString":83,"impactScore":80,"exploitabilityScore":338},[346,412],{"ecosystem":9,"name":347,"vendor":348,"product":349,"cpe_part":350,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":351},"confluence data center","atlassian","confluence_data_center","a",[352,358,361,364,367,370,373,376,379,382,385,388,391,394,397,401,403,405,407,409,411],{"version":353,"is_range":53,"range_type":82,"version_start":354,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},">= next of 1.3.0, \u003C unspecified","next of 1.3.0","including","unspecified","excluding",{"version":359,"is_range":53,"range_type":82,"version_start":356,"version_start_type":355,"version_end":360,"version_end_type":357,"fixed_in":9},">= unspecified, \u003C 7.4.17","7.4.17",{"version":362,"is_range":53,"range_type":82,"version_start":363,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},">= 7.13.0, \u003C unspecified","7.13.0",{"version":365,"is_range":53,"range_type":82,"version_start":356,"version_start_type":355,"version_end":366,"version_end_type":357,"fixed_in":9},">= unspecified, \u003C 7.13.7","7.13.7",{"version":368,"is_range":53,"range_type":82,"version_start":369,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},">= 7.14.0, \u003C unspecified","7.14.0",{"version":371,"is_range":53,"range_type":82,"version_start":356,"version_start_type":355,"version_end":372,"version_end_type":357,"fixed_in":9},">= unspecified, \u003C 7.14.3","7.14.3",{"version":374,"is_range":53,"range_type":82,"version_start":375,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},">= 7.15.0, \u003C unspecified","7.15.0",{"version":377,"is_range":53,"range_type":82,"version_start":356,"version_start_type":355,"version_end":378,"version_end_type":357,"fixed_in":9},">= unspecified, \u003C 7.15.2","7.15.2",{"version":380,"is_range":53,"range_type":82,"version_start":381,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},">= 7.16.0, \u003C unspecified","7.16.0",{"version":383,"is_range":53,"range_type":82,"version_start":356,"version_start_type":355,"version_end":384,"version_end_type":357,"fixed_in":9},">= unspecified, \u003C 7.16.4","7.16.4",{"version":386,"is_range":53,"range_type":82,"version_start":387,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},">= 7.17.0, \u003C unspecified","7.17.0",{"version":389,"is_range":53,"range_type":82,"version_start":356,"version_start_type":355,"version_end":390,"version_end_type":357,"fixed_in":9},">= unspecified, \u003C 7.17.4","7.17.4",{"version":392,"is_range":53,"range_type":82,"version_start":393,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},">= 7.18.0, \u003C unspecified","7.18.0",{"version":395,"is_range":53,"range_type":82,"version_start":356,"version_start_type":355,"version_end":396,"version_end_type":357,"fixed_in":9},">= unspecified, \u003C 7.18.1","7.18.1",{"version":398,"is_range":53,"range_type":399,"version_start":400,"version_start_type":355,"version_end":360,"version_end_type":357,"fixed_in":9},"gte1.3_lt7.4.17","cpe","1.3",{"version":402,"is_range":53,"range_type":399,"version_start":363,"version_start_type":355,"version_end":366,"version_end_type":357,"fixed_in":9},"gte7.13.0_lt7.13.7",{"version":404,"is_range":53,"range_type":399,"version_start":369,"version_start_type":355,"version_end":372,"version_end_type":357,"fixed_in":9},"gte7.14.0_lt7.14.3",{"version":406,"is_range":53,"range_type":399,"version_start":375,"version_start_type":355,"version_end":378,"version_end_type":357,"fixed_in":9},"gte7.15.0_lt7.15.2",{"version":408,"is_range":53,"range_type":399,"version_start":381,"version_start_type":355,"version_end":384,"version_end_type":357,"fixed_in":9},"gte7.16.0_lt7.16.4",{"version":410,"is_range":53,"range_type":399,"version_start":387,"version_start_type":355,"version_end":390,"version_end_type":357,"fixed_in":9},"gte7.17.0_lt7.17.4",{"version":393,"is_range":27,"range_type":399,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":413,"vendor":348,"product":414,"cpe_part":350,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":415},"Confluence Server","confluence_server",[416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436],{"version":353,"is_range":53,"range_type":82,"version_start":354,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},{"version":359,"is_range":53,"range_type":82,"version_start":356,"version_start_type":355,"version_end":360,"version_end_type":357,"fixed_in":9},{"version":362,"is_range":53,"range_type":82,"version_start":363,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},{"version":365,"is_range":53,"range_type":82,"version_start":356,"version_start_type":355,"version_end":366,"version_end_type":357,"fixed_in":9},{"version":368,"is_range":53,"range_type":82,"version_start":369,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},{"version":371,"is_range":53,"range_type":82,"version_start":356,"version_start_type":355,"version_end":372,"version_end_type":357,"fixed_in":9},{"version":374,"is_range":53,"range_type":82,"version_start":375,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},{"version":377,"is_range":53,"range_type":82,"version_start":356,"version_start_type":355,"version_end":378,"version_end_type":357,"fixed_in":9},{"version":380,"is_range":53,"range_type":82,"version_start":381,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},{"version":383,"is_range":53,"range_type":82,"version_start":356,"version_start_type":355,"version_end":384,"version_end_type":357,"fixed_in":9},{"version":386,"is_range":53,"range_type":82,"version_start":387,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},{"version":389,"is_range":53,"range_type":82,"version_start":356,"version_start_type":355,"version_end":390,"version_end_type":357,"fixed_in":9},{"version":392,"is_range":53,"range_type":82,"version_start":393,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},{"version":395,"is_range":53,"range_type":82,"version_start":356,"version_start_type":355,"version_end":396,"version_end_type":357,"fixed_in":9},{"version":398,"is_range":53,"range_type":399,"version_start":400,"version_start_type":355,"version_end":360,"version_end_type":357,"fixed_in":9},{"version":402,"is_range":53,"range_type":399,"version_start":363,"version_start_type":355,"version_end":366,"version_end_type":357,"fixed_in":9},{"version":404,"is_range":53,"range_type":399,"version_start":369,"version_start_type":355,"version_end":372,"version_end_type":357,"fixed_in":9},{"version":406,"is_range":53,"range_type":399,"version_start":375,"version_start_type":355,"version_end":378,"version_end_type":357,"fixed_in":9},{"version":408,"is_range":53,"range_type":399,"version_start":381,"version_start_type":355,"version_end":384,"version_end_type":357,"fixed_in":9},{"version":410,"is_range":53,"range_type":399,"version_start":387,"version_start_type":355,"version_end":390,"version_end_type":357,"fixed_in":9},{"version":393,"is_range":27,"range_type":399,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9}]