Confluence vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

CO

Product

Confluence

by Mattermost · last CVE Feb 6, 2026

14

CVEs

0

On KEV

7.5

Max CVSS

0

New 30D

Vulnerabilities14 In the news0 Timeline

Severity mix

Critical 0High 4Medium 8Low 2

Severity

All severities14 Critical0 High4 Medium8 Low2

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Confluence to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-54525	7.5	0%	Aug 11	Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription… Affected: before 1.5.0
CVE-2025-54463	7.5	0%	Aug 11	Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an… Affected: before 1.5.0
CVE-2025-52931	7.5	0%	Aug 11	Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription… Affected: before 1.5.0
CVE-2025-44004	7.2	0%	Aug 11	Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription without… Affected: before 1.5.0