A flaw in Atlassian Confluence Server and Data Centre has been uncovered, which might allow an unauthenticated user to run arbitrary code.

If this vulnerability is successfully exploited, remote code execution could be possible in the context of the account that runs the Confluence Server or Data Centre service. An attacker could see, alter, or remove data depending on the privileges associated with the account. 

This Vulnerability is tagged as CVE-2022-26134, and it is classified Critical.

This vulnerability is being actively exploited by threat actors. Volexity, a cybersecurity firm, utilized a proof-of-concept exploit to demonstrate that it likely affects all current Confluence versions.

                                                                                                           Table 1: Vulnerability details

                                  Table 2: Vulnerable versions