TI-2026-76414 CVE-2026-107188 · GHSA-pv68-m9mv-v63w
File upload in Eptura Archibus lets attackers run code on the server
Priority MEDIUM 43
A user can upload export reports with any file contents and specify any contents.
Eptura
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Eptura records in CISA KEVNo Eptura vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2026-76412 CVE-2026-107186 · GHSA-fhwf-9fxr-chxq
Authentication bypass in Eptura Archibus DWR API lets workflow rules run
Priority MEDIUM 43
An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule.
TI-2025-19081 CVE-2025-25652 · GHSA-qwr7-q5qh-qpg6
In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the…
Priority MEDIUM 40
In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal.
TI-2026-76413 CVE-2026-107187 · GHSA-xxc6-v8c2-mg2f
Workflow rule in Eptura Archibus exposes sensitive database tables
Priority LOW 37
A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule.
TI-2023-26493 CVE-2023-48645 · GHSA-5j36-2f99-3384
An issue was discovered in the Archibus app 4.0.3 for iOS.
Priority LOW 35
An issue was discovered in the Archibus app 4.0.3 for iOS.
TI-2023-26492 CVE-2023-48644 · GHSA-xq72-5mqw-j6rc
An issue was discovered in the Archibus app 4.0.3 for iOS.
Priority LOW 27
An issue was discovered in the Archibus app 4.0.3 for iOS.