Critical Zero-Day Vulnerabilities in Atlassian Confluence Exploited

Atlassian Confluence Server and Data Center are affected by two critical vulnerabilities — CVE-2022-26134 (unauthenticated RCE, actively exploited since June 2022) and CVE-2023-22515 (unauthenticated creation of admin accounts, disclosed October 2023) — with confirmed exploitation in the wild; organizations are urgently advised to apply patches or restrict access to internet-facing instances.