https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:24:22.881707+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0590 certfr-2024-avi-0590 — De multiples vulnérabilités ont été découvertes dans les produits Atlassian. Elles permettent à un attaquant de provoqu… 2026-10-05T17:24:22.885374+00:00 certfr-2024-avi-0590 https://cve.radiocsirt.org/vuln/euvd-2026-223703 EUVD-2026-223703 2026-10-05T17:24:22.885414+00:00 EUVD-2026-223703 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21686 fkie_cve-2024-21686 2026-10-05T17:24:22.885429+00:00

This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server.

This Stored XSS vulnerability, with a CVSS Score of 7.3, allows an authenticated attacker to execute arbitrary HTML or JavaScript code on a victims browser which has high impact to confidentiality, high impact to integrity, no impact to availability, and requires user interaction.

Atlassian recommends that Confluence Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions listed on this CVE

See the release notes (https://confluence.atlassian.com/doc/confluence-release-notes-327.html). You can download the latest version of Confluence Data Center and Server from the download center (https://www.atlassian.com/software/confluence/download-archives).

This vulnerability was reported via our Bug Bounty program.

 https://cve.radiocsirt.org/vuln/ghsa-7x4x-g7pr-2356 GHSA-7x4x-g7pr-2356 2026-10-05T17:24:22.885468+00:00

This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server.

This Stored XSS vulnerability, with a CVSS Score of 7.3, allows an authenticated attacker to execute arbitrary HTML or JavaScript code on a victims browser which has high impact to confidentiality, high impact to integrity, no impact to availability, and requires user interaction.

Atlassian recommends that Confluence Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions listed on this CVE

See the release notes (https://confluence.atlassian.com/doc/confluence-release-notes-327.html). You can download the latest version of Confluence Data Center and Server from the download center (https://www.atlassian.com/software/confluence/download-archives).

This vulnerability was reported via our Bug Bounty program.

 https://cve.radiocsirt.org/vuln/gsd-2024-21686 gsd-2024-21686 2026-10-05T17:24:22.885490+00:00 gsd-2024-21686 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1627 WID-SEC-W-2024-1627 — Atlassian Confluence: Mehrere Schwachstellen 2026-10-05T17:24:22.885502+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Atlassian Confluence ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, einen Cross-Stite-Scripting-Angriff oder einen unspezifischen Angriff durchzuführen.