All verified exploits

CVE-2021-26086 Path Traversal via Static Resources

CVE-2021-26086 is a critical-severity vulnerability, listed in the CISA KEV catalog. AttackerView checks Jira sites for it with a live exploit check.

Deterministic critical Jira CISA KEV Added 8mo ago cve-verified-cve-2021-26086

Is my site vulnerable to CVE-2021-26086?

Reads internal configuration files like WEB-INF/web.xml through Jira's semicolon path parameter bypass in static resource serving.

Is your app exploitable through CVE-2021-26086?

Scan your domain free