Exploit for CVE-2021-26084

kitploit · 2026-08-27

Description

OGNL injection vulnerability in Confluence.

Entry point

ParameterqueryString · request body

Path/pages/createpage-entervariables.action

OGNL injection in Confluence WebWork to execute commands (RCE).

Affected software

Atlassian Confluence Data Center< 6.13.23, 7.4.11, 7.11.6, 7.12.5

Atlassian Confluence Server< 6.13.23, 7.4.11, 7.11.6, 7.12.5

All known vulnerabilities by product

CVSS 9.8 for CVE-2021-26084

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-27 07:21

Last Seen:2026-08-27 20:19

Reporter:KitPloit

Tags

ConfluenceOGNL injectionexpression languagecode execution

Other exploits for CVE-2021-26084

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

confluence-rce-poc

2026-08-28 KitPloitKITPLOIT

Confluence_CVE-2021-26084

2026-08-28 KitPloitKITPLOIT

docker-confluence-patched

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-LONEYERS-CVE-2021-26084
# CVE-2021-26084

CVE-2021-26084 - внедрение OGNL в Confluence

![图片](https://assets.kitploit.com/production/public/readmes/37559/01d49ede24d346c7e1a344155d3f5c9d8a65f71b4280c8d0a30fa09d66450981.png) ![图片](https://assets.kitploit.com/production/public/readmes/37559/7107ca51ae9e0316c521153b902cac34a0a3c92bb3223773ab4c09e8a6793a36.png) ![图片](https://assets.kitploit.com/production/public/readmes/37559/da192a72f527b6f027b4a895560e93ebd56cd223825a78f4654877cff5d0b59d.png)