CVE-2022-26134: Patches Become Available for Confluence Zero-Day as Proof of Concept Goes Public

On June 3 at 10 am PDT, Atlassian updated its advisory for CVE-2022-26134, the Confluence Server and Data Center zero-day vulnerability that was first disclosed yesterday. Atlassian has published patches for various versions of Confluence.

Tenable product coverage for this vulnerability has been developed and will be available in the feed within the next few hours. 

• Plugin ID 161808: “CVE-2022-26134 Confluence Version Check”

Additionally, Tenable’s Security Response Team is aware that a public proof-of-concept exploit for this flaw has been published to GitHub.

We are investigating a direct check for this flaw.

We have published our blog for this vulnerability in a FAQ format and any additional updates, including the availability of a direct check will be shared there.