Uwaga. Odbywa się masowe wykorzystywanie krytycznej podatności w Atlassian Confluence. Łatajcie ASAP!

Mass exploitation of Atlassian Confluence CVE-2021-26084 is ongoing and expected to accelerate. Please patch immediately if you haven’t already— this cannot wait until after the weekend.

— USCYBERCOM Cybersecurity Alert (@CNMF_CyberAlert) September 3, 2021

About CVE-2021-26084, Block endpoint /pages/createpage-entervariables.action
If you can't patch your server. The attacker can exploit without authentication although signup is disabled by default
Mass scan already start and bug bounty hunters are farming it 🙂#RCE #Confluence pic.twitter.com/C0JfIEYPhb

— Tuan Anh Nguyen 🇻🇳 (@haxor31337) August 31, 2021