All vulnerabilities

Servers and applications

CVE-2026-21577

This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center. This DoS (Denial of Service) vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to cause a resource to be unavailable for its intended users by temporarily or indefinitely disrupting services of a…

Severity
High 7.1
Published
21 Jul 2026
Last changed
10 Aug 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
ConfluenceServers and applications · cpe:a:atlassian:confluence_data_center
  • From 10.2.0 up to 10.2.6
  • From 10.1.0 up to 10.1.2
  • From 10.0.2 up to 10.0.3
  • From 9.5.1 up to 9.5.4
All 9 release lines
  • From 9.0.1 up to 9.0.3
  • From 9.1.0 up to 9.1.1
  • From 9.2.0 up to 9.2.15
  • From 9.3.1 up to 9.3.2
  • From 9.4.0 up to 9.4.1
  • From 9.5.1 up to 9.5.4
  • From 10.0.2 up to 10.0.3
  • From 10.1.0 up to 10.1.2
  • From 10.2.0 up to 10.2.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-21577
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-21577