What’s Vulnerable › Vulnerabilities

CVE-2026-107186: Eptura Archibus Direct Web Remoting (DWR) API Authentication Bypass via Privileged Session Reuse

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-19 · updated 2026-10-20
• Weakness: CWE-287

Description

An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule. This allows for workflow rules to be run without authentication.

Affected products

• Eptura Archibus: before 2025.02 — fixed in 2025.02

How to fix

Upgrade to a fixed version: Eptura Archibus 2025.02. Check the vendor advisory for mitigations.

In the news

• Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)

References

• https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed/

Get alerted when CVE-2026-107186 or the next vulnerability affects your stack