TI-2026-76414 CVE-2026-107188 · GHSA-pv68-m9mv-v63w
File upload in Eptura Archibus lets attackers run code on the server
Priority MEDIUM 43
A user can upload export reports with any file contents and specify any contents.
Vulnerabilities
3 records
TI-2026-76413 CVE-2026-107187 · GHSA-xxc6-v8c2-mg2f
Workflow rule in Eptura Archibus exposes sensitive database tables
Priority LOW 37
A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule.
TI-2026-76412 CVE-2026-107186 · GHSA-fhwf-9fxr-chxq
Authentication bypass in Eptura Archibus DWR API lets workflow rules run
Priority MEDIUM 43
An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule.