PT-2026-62000 · Atlassian · Confluence

CVE-2026-21579

·

Published

2026-07-21

·

Updated

2026-08-11

CVSS v4.0

8.2

High

VectorAV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Confluence Data Center versions 7.17.0 Confluence Data Center version 7.19.0 Confluence Data Center version 8.5.0 Confluence Data Center version 8.9.0 Confluence Data Center version 9.0.1 Confluence Data Center version 9.1.0 Confluence Data Center version 9.2.0 Confluence Data Center version 10.0.2 Confluence Data Center version 10.1.0 Confluence Data Center version 10.2.0
Description An unauthenticated attacker can view sensitive information due to an information disclosure flaw.
Recommendations For version 9.2.0, upgrade to a release greater than or equal to 9.2.22. For version 10.2.0, upgrade to a release greater than or equal to 10.2.14. For versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 10.0.2, and 10.1.0, upgrade to the latest version.

Fix

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-21579

Affected Products

Confluence