ctrlINT What the industry said about every indicator, with the quote

CVE-2022-26134Vulnerability

Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 2 independent sources · first reported by GreyNoise · last reported

Last reported 2 months ago

CISA KEVAdded 2 Jun 2022
Fix due 6 Jun 2022
Used by ransomware: knownCISA KEV catalogue
EPSS100.0%
higher than 99% of CVEsFIRST EPSS, as of 29 Sep 2026

What the reports say

3 reports, newest first · the exact sentence from each

  1. “CVE-2022-26134: HTTP.URI.Java.Expression.Language.Code.Injection”

    Fortinet Threat ResearchVendor
    Multi-Functional Linux Botnet “Evooo1Bot”

  2. “Atlassian Confluence — CVE-2022-26134 (OGNL Injection)”

    GreyNoiseVendor
    Coordinated Cloud-Based Scanning Operation Targets 75 Known Exposure Points in One Day

  3. “CVE-2022-26134 – Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability”

    GreyNoiseVendor
    GreyNoise Detects Active Exploitation of CVEs Mentioned in Black Basta’s Leaked Chat Logs

Indicators reported together

named in the same reports

Also named with it: CVE-2022-30525, CVE-2017-11882, CVE-2023-38831, CVE-2023-36884, CVE-2018-14558, CVE-2017-5753, CVE-2020-1472, CVE-2024-4577, CVE-2022-27925, CVE-2021-26855, CVE-2021-36260, CVE-2023-20198, CVE-2024-21762, CVE-2022-41082, CVE-2023-34362, CVE-2023-23397, CVE-2024-3400, CVE-2021-44228, CVE-2024-1709, CVE-2024-1708

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2022-26134 here?
No account needed. We do not store your IP address.