VulnSocial

CVE-2026-21579Patch(atlassian / confluence_data_center)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch atlassian confluence_data_center systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Information Disclosure vulnerability, with a CVSS Score of 8.2, allows an unauthenticated attacker to view sensitive information via an Information Disclosure vulnerability. Atlassian recommends that Confluence Data Center customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Confluence Data Center 9.2: Upgrade to a release greater than or equal to 9.2.22 Confluence Data Center 10.2: Upgrade to a release greater than or equal to 10.2.14 See the release notes ([https://confluence.atlassian.com/doc/confluence-release-notes-327.html]). You can download the latest version of Confluence Data Center from the download center ([https://www.atlassian.com/software/confluence/download-archives]). This vulnerability was reported via our Atlassian (Internal) program.

atlassian CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-200

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • confluence_data_center

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
atlassian
Products
confluence_data_center

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-21: 1Patch / Workaround · 2026-07-21: 1Technical Details · 2026-07-21: 107-21
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • VulniPulse@vulnipulse
    Patch

    ⚠️ Atlassian Confluence Data Center alert: CVE-2026-21579 (CVSS 8.2) Unauthenticated attackers could access sensitive information. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/atlassian-cve-2026-21579 #Atlassian #ConfluenceDataCenter #CyberSecurity #CVE

    Post summary

    The tweet advertises a vendor advisory for CVE‑2026‑21579, urging users to upgrade to a fixed release, and includes some technical details such as CVSS score and unauthenticated data access, but no PoC or active exploitation evidence.

    0000060
    6 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appatlassianconfluence_data_center---

Explore more

Back to dashboardatlassian CVEsconfluence_data_center vulnerabilities