Exploit for Expression Language Injection in Atlassian Confluence Data Center

CVE-2022-26134

githubexploit · 2026-07-10

Description

PoC demonstrates an expression language injection vulnerability in Atlassian Confluence Data Center.

Affected software

Atlassian Confluence Data Center< 7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4, 7.18.0

Atlassian Confluence Server< 7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4, 7.18.0

All known vulnerabilities by product

Confluence

CVSS 9.8 for CVE-2022-26134

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 3 file(s) in the source

Exploit Details

Modified:2026-07-10 09:57

Last Seen:2026-07-10 09:58

Reporter:RootEvil333

Repository:No longer on GitHub

Other exploits for CVE-2022-26134

CVE-2022-26134

2026-08-28 KitPloitKITPLOIT

confluencePot

2026-08-28 KitPloitKITPLOIT

cve-2022-26134

2026-08-28 KitPloitKITPLOIT

CVE-2022-26134-PoC

2026-08-28 KitPloitKITPLOIT

CVE-2022-26134

2026-08-28 KitPloitKITPLOIT

-CVE-2022-26134

2026-08-28 KitPloitKITPLOIT

CVE-2022-26134

2026-08-28 KitPloitKITPLOIT

ATLASSIAN-Confluence_rce

2026-08-28 KitPloitKITPLOIT

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=835244D7-F4C4-5E8A-93A5-829B2812B279
PoC for CVE-2022-26134

Exploit Code

Share

Share on social media: