Denial of Service Vulnerability in Confluence Data Center by Atlassian
CVE-2026-21577

7.1HIGH

Key Information:

Vendor

Atlassian
Status
Confluence Data Center
Vendor
CVE Published:
21 July 2026

What is CVE-2026-21577?

This vulnerability enables an authenticated attacker to disrupt network services in Confluence Data Center, potentially making resources unavailable for legitimate users. Affected versions include Confluence Data Center 9.0.1 through 10.2.0. Users are advised to upgrade to supported versions, specifically to Confluence Data Center 9.2.17 or higher and 10.2.7 or higher. Timely action is crucial to prevent service disruptions.

Affected Version(s)

Confluence Data Center 10.2.0 to 10.2.6

Confluence Data Center 10.1.0 to 10.1.2

Confluence Data Center 10.0.2 to 10.0.3

References

https://confluence.atlassian.com/pages/viewpage.action?pa...
https://jira.atlassian.com/browse/CONFSERVER-104334

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.