Back to CVE Browser

CVE-2021-26085

🔥 Known Exploited (CISA KEV)MEDIUM

5.3

CVSS Severity Score

EPSS Score88.8890%

EPSS Percentile91.18th

Published2021-08-03

Last Modified2025-10-24

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.

Affected Platforms (CPE)

📦

Atlassian

Confluence Data Center

< 7.4.10>= 7.5.0 and < 7.12.3

📦

Atlassian

Confluence Server

< 7.4.10>= 7.5.0 and < 7.12.3

References & Advisories

🔗 http://packetstormsecurity.com/files/164401/Atlassian-Confluence-Server-7.5.1-Arbitrary-File-Read.html

🔗 https://jira.atlassian.com/browse/CONFSERVER-67893

🔗 http://packetstormsecurity.com/files/164401/Atlassian-Confluence-Server-7.5.1-Arbitrary-File-Read.html

🔗 https://jira.atlassian.com/browse/CONFSERVER-67893

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26085

Related Vulnerabilities

CVE-2026-466786.8

Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.56.0 through 1.98.0, when an applic...

CVE-2026-133088.1

Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote...

CVE-2026-133076.8

Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows p...

CVE-2026-61027.8

MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers...