All vulnerabilities

Servers and applications

CVE-2026-21579

This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Information Disclosure vulnerability, with a CVSS Score of 8.2, allows an unauthenticated attacker to view sensitive information via an Information Disclosure vulnerability. Atlassian recommends that…

Severity
High 8.2
Published
21 Jul 2026
Last changed
11 Aug 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
ConfluenceServers and applications · cpe:a:atlassian:confluence_data_center
  • From 10.2.0 up to 10.2.13
  • From 10.1.0 up to 10.1.2
  • From 10.0.2 up to 10.0.3
  • From 9.2.0 up to 9.2.21
All 9 release lines
  • From 7.19.26 up to 7.19.30
  • From 8.5.14 up to 8.5.31
  • From 8.9.5 up to 8.9.8
  • From 9.0.1 up to 9.0.3
  • From 9.1.0 up to 9.1.1
  • From 9.2.0 up to 9.2.21
  • From 10.0.2 up to 10.0.3
  • From 10.1.0 up to 10.1.2
  • From 10.2.0 up to 10.2.13

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-21579
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-21579