OGNL Injection - Vulnerability

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
March 6, 2026
Last Seen
June 17, 2026

OGNL Injection is a vulnerability tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed March 6, 2026; most recent activity June 17, 2026.

Related Threat Clusters

  • Critical Zero-Day Vulnerabilities in Atlassian Confluence Exploited

    Atlassian Confluence has faced multiple critical vulnerabilities, including CVE-2022-26134 and CVE-2023-22515. CVE-2022-26134, published on June 3, 2022, is an unauthenticated remote code execution vulnerability that…

    3 articles · Updated June 17, 2026
  • New CVSS 10.0 Vulnerability CVE-2026-29000 Discovered

    A new CVSS 10.0 vulnerability, CVE-2026-29000, was published on March 4, 2026, allowing attackers to bypass authentication in the pac4j-jwt library, enabling impersonation of any user, including administrators. This…

    2 articles · Updated March 6, 2026

Recent Intelligence Reports

  • Rapid7 Analysis: CVE-2022 — Rapid7 · June 17, 2026
  • Why CVSS 10 Vulnerabilities Are So Dangerous (Real Examples) — Codeant.Ai · March 6, 2026

Related Entities

Data Breach Zero-day Exploit Atlassian Equifax CVE-2017-5638 CVE-2018-11776 CVE-2021-26084 CVE-2021-44228 CVE-2022-26134 CVE-2022-26314 CVE-2026-29000 CWE-94 - Code Injection

CVSS v3.1 Breakdown