CVE-2026-21586

Name of the Vulnerable Software and Affected Versions Confluence Data Center version 7.4.0 Confluence Data Center version 7.13.0 Confluence Data Center version 8.5.0 Confluence Data Center version 8.9.0 Confluence Data Center version 9.0.1 Confluence Data Center version 9.1.0 Confluence Data Center version 9.2.0 Confluence Data Center version 9.3.1 Confluence Data Center version 9.4.0 Confluence Data Center version 9.5.1 Confluence Data Center version 10.0.2 Confluence Data Center version 10.1.0 Confluence Data Center version 10.2.0

Description An improper authorization issue allows an authenticated attacker to gain unintended access to resources or functionality. This could lead to the exposure of sensitive information or the execution of arbitrary code.

Recommendations Upgrade Confluence Data Center version 9.2.0 to a release greater than or equal to 9.2.24. Upgrade Confluence Data Center version 10.2.0 to a release greater than or equal to 10.2.17. Upgrade all other affected versions to the latest available release.