---
id: 2763
title: "Severe Confluence Vulnerability is an Active Threat (CVE-2022-26134)"
cve: CVE-2022-26134
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/severe-confluence-vulnerability-active-threat-cve-2022-26134"
published_at: "2022-06-06T20:20:00Z"
tags: ["rce", "zero-day", "patching", "atlassian", "cve-2022-26134", "confluence", "threat-activity"]
phying_url: "https://phying.com/item/2763"
lang: en
---

# Severe Confluence Vulnerability is an Active Threat (CVE-2022-26134)

## Summary

An unauthenticated RCE zero-day in Atlassian Confluence (CVE-2022-26134) was exploited in the wild before disclosure, with attack IPs surging past 800 within days. Patching should be immediate.

## Intelligence Metadata

- **Sources:** hackerone.com
- **CVE:** CVE-2022-26134
- **Published:** 2022-06-06T20:20:00Z
- **Original:** https://www.hackerone.com/blog/severe-confluence-vulnerability-active-threat-cve-2022-26134
- **Phying News:** https://phying.com/item/2763