Critical Confluence Update

Please be advised that US Cybercom has issued a notification warning of mass and escalating exploitation of a Confluence OGNL Server Webwork injection vulnerability that would allow for the injection of arbitrary code on a Confluence Server or Data Center instance. This vulnerability is tracked as CVE-2021-26084. It’s recommended that IT teams update immediately to the latest Long Term Support release or take mitigation steps if they cannot do so. Please see the following Atlassian advisory for information on affected versions, updates and mitigation steps.