All verified exploits

CVE-2021-26085 Path Traversal via Static Resources

CVE-2021-26085 is a critical-severity vulnerability, listed in the CISA KEV catalog. AttackerView checks Confluence sites for it with a live exploit check.

Deterministic critical Confluence CISA KEV Added 8mo ago cve-verified-cve-2021-26085

Is my site vulnerable to CVE-2021-26085?

Reads internal configuration files through Confluence's semicolon path parameter bypass, the same technique as the Jira variant.

Is your app exploitable through CVE-2021-26085?

Scan your domain free