[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2bSXadbcgoaRUd2m1smSiUwkcRpNcEwfoBdBTXkXNR8":3,"g5a-risk:CVE-2021-26085":139},{"success":4,"data":5,"meta":137},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":26,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":57,"references":58,"referencesCount":40,"weaknesses":81,"weaknessesCount":90,"isActivelyExploited":4,"cisaInfo":91,"otxData":26,"relatedBlogPosts":92,"seoMetadata":93,"configurations":118,"relatedVendorCves":135,"notableEvents":136},"CVE-2021-26085","What is CVE-2021-26085?","Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the \u002Fs\u002F endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.","Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerabilit...","2021-08-03T00:15:08.557","2025-10-24T13:38:39.563",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":25,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":44,"ObtainAllPrivilege":44,"ObtainUserPrivilege":44,"ObtainOtherPrivilege":44,"UserInteractionRequired":44},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":40,"BaseSeverity":41,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"",10,2.9,false,0.99937,[45,45,45,45,45,45,45],"Medium",[49,54],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"atlassian","confluence_data_center","*","cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*",{"vendor":50,"product":55,"version":52,"criteria":56,"vulnerable":4},"confluence_server","cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*",2,[59,66,72,74,76],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F164401\u002FAtlassian-Confluence-Server-7.5.1-Arbitrary-File-Read.html","Packetstormsecurity",[63,64,65],"Exploit","Third Party Advisory","VDB Entry",{"url":67,"source":68,"tags":69},"https:\u002F\u002Fjira.atlassian.com\u002Fbrowse\u002FCONFSERVER-67893","Atlassian",[70,71],"Issue Tracking","Vendor Advisory",{"url":60,"source":61,"tags":73},[63,64,65],{"url":67,"source":68,"tags":75},[70,71],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26085","CISA",[80],"US Government Resource",[82],{"id":83,"name":84,"description":85,"extendedDescription":86,"status":87,"abstraction":88,"structure":89},"CWE-425","Direct Request ('Forced Browsing')","The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.","Web applications susceptible to direct request attacks often make the false assumption that such resources can only be reached through a given navigation path and so only apply authorization at certain points in the path.","Incomplete","Base","Simple",1,{"shortDescription":41,"requiredAction":41,"vulnerabilityName":41,"dateAdded":26},[],{"title":94,"metaDescription":95,"keywords":96,"canonicalUrl":97,"structuredData":98},"What is CVE-2021-26085? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-26085, a medium severity cyber security vulnerability from 2021. High exploit probability (99.9%). Affected versions of At...","CVE-2021-26085, CVE-2021-26085 vulnerability, CVE-2021-26085 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, atlassian security, confluence_data_center vulnerability, confluence_server vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2021-26085",{"@context":99,"@type":100,"headline":94,"description":95,"datePublished":10,"dateModified":11,"author":101,"publisher":105,"about":109,"mainEntityOfPage":113,"articleSection":116,"keywords":117},"https:\u002F\u002Fschema.org","TechArticle",{"@type":102,"name":103,"url":104},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":102,"name":103,"url":104,"logo":106},{"@type":107,"url":108},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":110,"name":6,"description":111,"additionalType":112},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":114,"@id":115},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-26085","Cybersecurity","CVE-2021-26085, CVE-2021-26085 vulnerability, CVE-2021-26085 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[119],{"Operator":26,"Negate":26,"Nodes":120},[121],{"Operator":122,"Negate":44,"CPEMatch":123},"OR",[124,127,131,133],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":125,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":126,"VersionEndIncluding":26},"83557716-7A48-48D5-85A9-4A29DBF4F511","7.4.10",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":128,"VersionStartExcluding":26,"VersionStartIncluding":129,"VersionEndExcluding":130,"VersionEndIncluding":26},"6A310D77-1FFF-4FFE-AD50-75DFF973EB3F","7.5.0","7.12.3",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":126,"VersionEndIncluding":26},"4BA04112-3B97-491B-93E6-80C444274430",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":134,"VersionStartExcluding":26,"VersionStartIncluding":129,"VersionEndExcluding":130,"VersionEndIncluding":26},"B1148DF0-42C0-435F-A6EB-EFA93E10E8D7",[],[],{"lastModified":11,"cacheTime":138,"version":37},1792377177106,{"score":140,"band":141,"action":142,"scoredAt":143},73,"High","Emergency patch","2026-10-16T06:51:41.199599+00:00"]