Companies/Confluence/CVEs

Confluence CVEs

253 vulnerabilities mapped to Confluence’s software or packages, 11 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first. Not a statement that the hosted service was exposed.

CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. Same list on the all-vendor CVE index.

• 2026-10-05

  CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

  CVSS 7.5 highKEV added 2026-10-15EPSS 99.5%

• 2026-10-01

  CVE-2026-68495 jackson-dataformats-binary: CBOR parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of service

  CVSS 7.5 highEPSS 0.56%

• 2026-09-28

  CVE-2026-101903 Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)

  CVSS 8.2 highEPSS 0.44%

• 2026-09-15

  CVE-2026-21588

  CVSS 7.1 highEPSS 0.40%

• 2026-09-15

  CVE-2026-21586

  CVSS 7.1 highEPSS 0.44%

• 2026-08-25

  CVE-2026-68763 Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset

  CVSS 7.5 highEPSS 0.74%

• 2026-08-25

  CVE-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases

  CVSS 8.1 highEPSS 0.46%

• 2026-08-25

  CVE-2026-68525 Apache Tomcat: Redirect after FORM auth may bypass method specific constraints

  CVSS 9.1 criticalEPSS 0.49%

• 2026-08-25

  CVE-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints

  CVSS 8.1 highEPSS 0.43%

• 2026-08-25

  CVE-2026-65927 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control

  CVSS 7.5 highEPSS 0.68%

• 2026-08-25

  CVE-2026-65905 Apache Tomcat: Limited replay attack possible with DIGEST authentication

  CVSS 9.8 criticalEPSS 0.56%

• 2026-08-25

  CVE-2026-65637 Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete

  CVSS 9.8 criticalEPSS 0.61%

• 2026-08-25

  CVE-2026-65183 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets

  CVSS 8.1 highEPSS 0.40%

• 2026-08-25

  CVE-2026-65182 Apache Tomcat: Bypass longest prefix security constraint

  CVSS 9.1 criticalEPSS 0.54%

• 2026-08-22

  CVE-2026-62243 Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass

  CVSS 7.5 highEPSS 0.16%

• 2026-08-19

  CVE-2026-75595 Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext

  CVSS 9.1 criticalEPSS 0.32%

• 2026-08-18

  CVE-2026-21580

  CVSS 8.6 highEPSS 0.51%

• 2026-08-17

  CVE-2026-73646 PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure

  CVSS 7.5 highEPSS 0.53%

• 2026-08-17

  CVE-2026-19693 extract-zip arbitrary file write outside the destination directory via a symlink at the final path component

  CVSS 8.1 highEPSS 0.45%

• 2026-08-13

  CVE-2026-73566 node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

  CVSS 7.5 highEPSS 0.53%

• 2026-08-13

  CVE-2026-73508 Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names

  CVSS 5.3 mediumEPSS 0.63%

• 2026-08-13

  CVE-2026-73507 Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion

  CVSS 7.5 highEPSS 0.79%

• 2026-08-11

  CVE-2026-73086 nanoid: Integer Overflow or Wraparound

  CVSS 7.4 highEPSS 0.30%

• 2026-08-03

  CVE-2026-13506 Lazy ASN.1 sequence forcing resets nesting-depth guard

  CVSS 7.5 highEPSS 0.49%

• 2026-08-03

  CVE-2026-12860 RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path

  CVSS 5.3 mediumEPSS 0.17%

• 2026-08-03

  CVE-2026-12816 IESEngine stream-mode MAC forgery via length-dependent KDF split

  CVSS 7.5 highEPSS 0.18%

• 2026-08-03

  CVE-2026-12803 KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)

  CVSS 7.5 highEPSS 0.24%

• 2026-08-03

  CVE-2026-12802 CMS AuthEnvelopedData fails to enforce tag-length on decryption

  CVSS 7.5 highEPSS 0.19%

• 2026-08-03

  CVE-2026-14682 Possible OOM from unbounded up-front allocation on a definite-length read

  CVSS 7.5 highEPSS 0.49%

• 2026-08-03

  CVE-2026-58059 Quadratic-time escaping when stringifying X.500 distinguished names

  CVSS 7.5 highEPSS 0.49%

• 2026-08-03

  CVE-2026-58060 HSS public-key level count unbounded, enabling huge allocation on verify

  CVSS 7.5 highEPSS 0.62%

• 2026-08-03

  CVE-2026-58061 CCM-family modes write plaintext to caller buffer before tag check

  CVSS 7.5 highEPSS 0.28%

• 2026-08-03

  CVE-2026-58062 Stapled OCSP response accepted without binding to the checked certificate

  CVSS 9.1 criticalEPSS 0.36%

• 2026-08-03

  CVE-2026-59639 CMS verifySignatures returns true for SignedData with zero signers

  CVSS 7.5 highEPSS 0.24%

• 2026-08-03

  CVE-2026-59641 S/MIME validator trusts signer-asserted signingTime for path validation

  CVSS 5.3 mediumEPSS 0.18%

• 2026-08-03

  CVE-2026-59642 CMS AuthenticatedData content not bound to MAC when authAttrs present

  CVSS 7.5 highEPSS 0.30%

• 2026-08-03

  CVE-2026-59645 OER parser recurses without depth limit on self-referential IEEE 1609.2 schema

  CVSS 7.5 highEPSS 0.41%

• 2026-08-03

  CVE-2026-59650 MTI/A0 DH agreement exponentiates unvalidated peer value

  CVSS 9.1 criticalEPSS 0.34%

• 2026-08-03

  CVE-2026-59651 BKS keystore accepts legacy version with 16-bit integrity MAC key

  CVSS 7.5 highEPSS 0.20%

• 2026-08-03

  CVE-2026-12185 BKS/UBER keystore allocates from untrusted lengths before integrity check

  CVSS 8.6 highEPSS 0.29%

• 2026-08-03

  CVE-2026-8763 Name Constraints bypass via trailing dot in rfc822Name and URI

  CVSS 9.1 criticalEPSS 0.43%

• 2026-07-29

  CVE-2026-59901 Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

  CVSS 7.5 highEPSS 0.46%

• 2026-07-29

  CVE-2026-67214 nanoid Infinite Loop via Negative Size in non-secure module

  CVSS 5.9 mediumEPSS 0.33%

• 2026-07-29

  CVE-2026-67213 nanoid before 5.1.6 Infinite Loop via Zero Size in customAlphabet and customRandom

  CVSS 5.9 mediumEPSS 0.33%

• 2026-07-27

  CVE-2026-45623 PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments

  CVSS 7.5 highEPSS 0.61%

• 2026-07-21

  CVE-2026-56819 Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)

  CVSS 7.5 highEPSS 0.66%

• 2026-07-21

  CVE-2026-56745 Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion

  CVSS 7.5 highEPSS 0.63%

• 2026-07-21

  CVE-2026-21577

  CVSS 6.5 mediumEPSS 0.43%

• 2026-07-21

  CVE-2026-21579

  CVSS 7.5 highEPSS 0.44%

• 2026-07-20

  CVE-2026-55833 Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation

  CVSS 7.5 highEPSS 0.66%

All vendors’ CVEs · JSON · Markdown

• CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
• This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
• Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
• EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)