DoS Vulnerability in Confluence Data Center by Atlassian
CVE-2026-21588

7.1HIGH

Key Information:

Vendor

Atlassian
Status
Confluence Data Center
Vendor
CVE Published:
15 September 2026

What is CVE-2026-21588?

A Denial of Service vulnerability is present in multiple versions of Confluence Data Center, allowing authenticated attackers to disrupt services and disable access for legitimate users. This issue affects various releases, including versions 8.9.0 through 10.2.0. To mitigate this risk, users are urged to upgrade to the latest versions or specific fixed versions as recommended by Atlassian. Proper remediation is essential to maintain service availability and protect against potential disruptions.

Affected Version(s)

Confluence Data Center 10.2.0 to 10.2.15

Confluence Data Center 10.1.0 to 10.1.2

Confluence Data Center 10.0.2 to 10.0.3

References

https://confluence.atlassian.com/pages/viewpage.action?pa...
https://jira.atlassian.com/browse/CONFSERVER-104451

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.