Confluence — PoC Archivehttps://poc.intelseclab.com/tags/confluence/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000mcp-atlassian Path Traversal via confluence_upload_attachment (CVE-2026-27825)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27825-mcp-atlassian-path-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-27825-mcp-atlassian-path-traversal/Critical severity (CVSS 9.3) — web · CVE-2026-27825 (read-side twin of GHSA-xjgw-4wvw-rgm4). Status: PoC. Affects: sooperset/mcp-atlassian MCP server. Tags: mcp, path-traversal, arbitrary-file-read, confluence, mcp-atlassian, cwe-22, unauthenticated.webCriticalmcppath-traversalarbitrary-file-readconfluencemcp-atlassiancwe-22unauthenticatedConfluence SSTI RCE - CVE-2023-22527https://poc.intelseclab.com/pocs/web/2026-05-17_confluence-ssti-rce-cve-2023-22527/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_confluence-ssti-rce-cve-2023-22527/Critical severity (CVSS 10) — web · CVE-2023-22527. Status: Weaponized. Affects: Atlassian Confluence Data Center and Confluence Server. Tags: RCE, Confluence, SSTI, Freemarker, OGNL, unauthenticated, Java, Atlassian, ransomware.webCriticalRCEConfluenceSSTIFreemarkerOGNLunauthenticatedJavaAtlassianransomwareConfluence Post-Auth RCE - CVE-2024-21683https://poc.intelseclab.com/pocs/web/2026-05-17_confluence-postauth-rce-cve-2024-21683/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_confluence-postauth-rce-cve-2024-21683/High severity (CVSS 8.3) — web · CVE-2024-21683. Status: Weaponized. Affects: Atlassian Confluence Data Center and Server. Tags: RCE, Confluence, post-auth, Rhino, JavaScript, Java, deserialization, Metasploit, red-team.webHighRCEConfluencepost-authRhinoJavaScriptJavadeserializationMetasploitred-team