{"schema_version":"2","view":"grouped","data":[{"id":2506,"cve_ids":["CVE-2022-26134"],"payload":{"kind":"advisory","title":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","summary":"Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution. CISA required action: Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.","evidence":"kev:CVE-2022-26134","products":[{"name":{"value":"Confluence Server/Data Center","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-26134","aliases":["CVE-2022-26134"],"affected":[],"modified":"2022-06-02T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-917"],"cveID":"CVE-2022-26134","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26134","dueDate":"2022-06-06","product":"Confluence Server/Data Center","dateAdded":"2022-06-02","vendorProject":"Atlassian","requiredAction":"Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.","known_exploited":true,"shortDescription":"Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.","vulnerabilityName":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-26134","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:22619b8e-b7c1-447e-b3a2-55815b1bc237","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26134","advisory_id":"22619b8e-b7c1-447e-b3a2-55815b1bc237","event_types":["advisory"],"published_at":"2026-10-24T21:19:57.038324+00:00","technologies":["confluence-server-data-center","core-kev"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-02T00:00:00+00:00","detail_url":"/advisories/advisory%3A22619b8e-b7c1-447e-b3a2-55815b1bc237","group":{"id":"advisory:22619b8e-b7c1-447e-b3a2-55815b1bc237","revision":1,"primary_event_id":2518,"change":"published","superseded_by":[],"changed":{"id":2518,"cve_ids":["CVE-2022-26134"],"payload":{"kind":"advisory","title":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","summary":"Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution. CISA required action: Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.","evidence":"kev:CVE-2022-26134","products":[{"name":{"value":"Confluence Server/Data Center","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-26134","aliases":["CVE-2022-26134"],"affected":[],"modified":"2022-06-02T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-917"],"cveID":"CVE-2022-26134","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26134","dueDate":"2022-06-06","product":"Confluence Server/Data Center","dateAdded":"2022-06-02","vendorProject":"Atlassian","requiredAction":"Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.","known_exploited":true,"shortDescription":"Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.","vulnerabilityName":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-26134","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:22619b8e-b7c1-447e-b3a2-55815b1bc237","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26134","advisory_id":"22619b8e-b7c1-447e-b3a2-55815b1bc237","event_types":["advisory"],"published_at":"2026-10-24T21:19:57.038324+00:00","technologies":["confluence-server-data-center","core-kev"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-02T00:00:00+00:00","detail_url":"/events/2518"},"members":[{"id":2518,"cve_ids":["CVE-2022-26134"],"payload":{"kind":"advisory","title":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","summary":"Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution. CISA required action: Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.","evidence":"kev:CVE-2022-26134","products":[{"name":{"value":"Confluence Server/Data Center","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-26134","aliases":["CVE-2022-26134"],"affected":[],"modified":"2022-06-02T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-917"],"cveID":"CVE-2022-26134","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26134","dueDate":"2022-06-06","product":"Confluence Server/Data Center","dateAdded":"2022-06-02","vendorProject":"Atlassian","requiredAction":"Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.","known_exploited":true,"shortDescription":"Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.","vulnerabilityName":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-26134","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:22619b8e-b7c1-447e-b3a2-55815b1bc237","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26134","advisory_id":"22619b8e-b7c1-447e-b3a2-55815b1bc237","event_types":["advisory"],"published_at":"2026-10-24T21:19:57.038324+00:00","technologies":["confluence-server-data-center","core-kev"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-02T00:00:00+00:00","detail_url":"/events/2518"}]}}],"next_after":2506,"next_before":2506}