CVE-2023-22518Vulnerability

Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on 7 Nov 2023.

Reported by 2 independent sources · first reported 7 Nov 2023 by Huntress · last reported 6 Oct 2026

Last reported 19 days ago

CISA KEVAdded 7 Nov 2023
Fix due 28 Nov 2023
Used by ransomware: knownCISA KEV catalogue

EPSS100.0%
higher than 99% of CVEsFIRST EPSS, as of 26 Sep 2026

What the reports say

2 reports, newest first · the exact sentence from each

“Référence CVE CVE-2023-22518”

CERT-FRGovernment6 Oct 2026
Multiples vulnérabilités dans les produits Atlassian (06 octobre 2026)
“Confluence to Cerber: Exploitation of CVE-2023-22518”

HuntressVendor7 Nov 2023
Confluence to Cerber: Exploitation of CVE-2023-22518

Indicators reported together

named in the same reports

5a2c6938554f9e54…9245303bda39in 1 report
hxxp://193.176.179[.]41/tmp.37in 1 report
193.176.179[.]41in 1 report
hxxp://193.176.179[.]41/tmp.37.txtin 1 report
f2e17ec85c3f8ee2…aa82a9d9707fin 1 report
hxxps://confluence.atlassian[.]com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.htmlin 1 report

Copy these 6 indicators · defanged

6 indicators, defanged, one per line

5a2c6938554f9e54d291f8fa0837d8d1e34b9b310bd02076affd9245303bda39
hxxp://193.176.179[.]41/tmp.37
193.176.179[.]41
hxxp://193.176.179[.]41/tmp.37.txt
f2e17ec85c3f8ee26a3be3ce52c6e140448941d705a9bdedb7c1aa82a9d9707f
hxxps://confluence.atlassian[.]com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html

Also named with it: CVE-2023-46604, CVE-2023-22527, CVE-2026-21589, CVE-2019-13990, CVE-2022-1471, CVE-2022-23521, CVE-2022-41903, CVE-2023-22522, CVE-2023-22523, CVE-2023-22524

Thanks — we review every report.

Report a wrong value