Is CVE-2013-3926 actively exploited?

No active exploitation of CVE-2013-3926 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2013-3926 be exploited remotely?

Yes. CVE-2013-3926 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2013-3926?

CVE-2013-3926 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2013-3926

HIGH

CVE-2013-3926

NVD-CWE-OtherPublished: July 1, 2013· Updated: Jun 16, 2026

7.5

CVSS v3.1

Official Description

Atlassian Crowd 2.6.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to a "symmetric backdoor." NOTE: as of 20130704, the vendor could not reproduce the issue, stating "We've been unable to substantiate the existence of [CVE-2013-3926]. The author of the article has not contacted Atlassian and has provided no detail, making it difficult to validate the claim... If we can confirm that there is a vulnerability, a patch will be issued.

NVD Source

Technical Analysis

CVE-2013-3926 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.