Skip to content
Server & Web Software

Atlassian Confluence (Questions for Confluence App — CVE-2022-26138) — Default Password

Default username and password for the Atlassian Confluence (Questions for Confluence App — CVE-2022-26138): disabledsystemuser / disabled1system1user6708. Learn how to log in and how to change the default credentials.

The Questions for Confluence app (versions 2.7.34, 2.7.35, 3.0.2) creates a Confluence account with a hardcoded password stored in the plugin JAR. Account joins the confluence-users group and persists even after uninstalling the app. Patched in 2.7.38 / 3.0.5.

UsernamePasswordAccessNotes
disabledsystemuser
disabled1system1user6708
Web UI

Responsible use

This database lists publicly documented default credentials so administrators can find and change them. Only use these on systems you own or are authorized to test.

Related devices