CVE-2026-107188criticalCWE-434

CVE-2026-107188: critical vulnerability in Eptura Archibus

Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

Published · Updated

Follow this CVE+ Monitor Archibus

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.6epss 0.4%
A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this vulnerability to run code on the server without authentication.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Affected products
Eptura · Archibus
Related CVEs — Eptura Archibus

In the same product, most dangerous first.

CVE-2026-107186HIGHEptura Archibus Direct Web Remoting (DWR) API Authentication Bypass via Privileged Session ReuseEPSS 0.4%CVE-2026-107187HIGHEptura Archibus Workflow Rule Enables Unauthenticated Database Read of Sensitive TablesEPSS 0.3%