https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:45:23.032292+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08564 bdu:2023-08564 2026-10-03T12:45:23.102644+00:00 bdu:2023-08564 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1001 certfr-2023-avi-1001 — Une vulnérabilité a été découverte dans Atlassian Confluence. Elle permet à un attaquant de provoquer une exécution de… 2026-10-03T12:45:23.102681+00:00 certfr-2023-avi-1001 https://cve.radiocsirt.org/vuln/euvd-2026-270629 EUVD-2026-270629 2026-10-03T12:45:23.102699+00:00 EUVD-2026-270629 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22522 fkie_cve-2023-22522 2026-10-03T12:45:23.102711+00:00

This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confluence page. Using this approach, an attacker is able to achieve Remote Code Execution (RCE) on an affected instance. Publicly accessible Confluence Data Center and Server versions as listed below are at risk and require immediate attention. See the advisory for additional details

Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.

 https://cve.radiocsirt.org/vuln/ghsa-rcjw-44p8-ppj6 GHSA-rcjw-44p8-ppj6 2026-10-03T12:45:23.102772+00:00

This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confluence page. Using this approach, an attacker is able to achieve Remote Code Execution (RCE) on an affected instance. Publicly accessible Confluence Data Center and Server versions as listed below are at risk and require immediate attention. See the advisory for additional details

Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-22522 gsd-2023-22522 2026-10-03T12:45:23.102790+00:00 gsd-2023-22522 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3063 WID-SEC-W-2023-3063 — Atlassian Produkte: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-03T12:45:23.102802+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Atlassian Bitbucket, Atlassian Confluence und Atlassian Jira Software ausnutzen, um beliebigen Programmcode auszuführen.