What’s Vulnerable › Vulnerabilities

CVE-2026-107188: Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

• Severity: critical (CVSS 9.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-19 · updated 2026-10-20
• Weakness: CWE-434

Description

A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this vulnerability to run code on the server without authentication.

Affected products

• Eptura Archibus: before 2025.02 — fixed in 2025.02

How to fix

Upgrade to a fixed version: Eptura Archibus 2025.02. Check the vendor advisory for mitigations.

In the news

• Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)

References

• https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed/

Get alerted when CVE-2026-107188 or the next vulnerability affects your stack