CVE-2026-21580: Confluence XSS That Skips Straight to Admin
An unauthenticated stored XSS in Confluence Data Center and Server chains into privilege escalation, turning your internal wiki into a path to full instance takeover.
securitycveatlassianxsspatching
