All 3 CVE vulnerabilities found in Archibus, with AI-generated Chinese analysis, references, and POCs.
Vendor: Eptura
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-107188 | Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution CWE-434 | 9.6 | Critical | 2026-10-19 |
| CVE-2026-107187 | Eptura Archibus Workflow Rule Enables Unauthenticated Database Read of Sensitive Tables CWE-200 | 8.5 | High | 2026-10-19 |
| CVE-2026-107186 | Eptura Archibus Direct Web Remoting (DWR) API Authentication Bypass via Privileged Session Reuse CWE-287 | 8.6 | High | 2026-10-19 |
All 3 known CVE vulnerabilities affecting Archibus with full Chinese analysis, references, and POCs where available.