CVE-2021-26085
Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
Published Aug 2, 2021 · updated Jun 16, 2026 · atlassian confluence data center
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.
Timeline
Detection, updates, and resolution for this record.
Aug 2, 2021 · Catalog
Detected
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.
Mar 28, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Apr 18, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.
Required action
Apply updates per vendor instructions.
CISA due date Apr 18, 2022
Affected
- cpe atlassian/confluence data centerversion unspecified
- cpe atlassian/confluence serverversion unspecified
- vendor Atlassian Confluence Serverversion unspecified
Sources
- CISA KEVCVE-2021-26085
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.
cisa.gov - CVE.orgCVE-2021-26085
Official CVE identifier
cve.org - FIRST EPSSCVE-2021-26085
30-day exploitation probability 99.9%
first.org - Exploit Database50377
Public archive entry. The exploit body is not stored here.
exploit-db.com - NIST NVDCVE-2021-26085
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.
nvd.nist.gov - Packet Storm Securityhttp://packetstormsecurity.com/files/164401/Atlassian-Confluence-Server-7.5.1-Arbitrary-File-Read.html
Packet Storm link already published on the finding.
packetstormsecurity.com