Authentication Bypass in Eptura Archibus by Eptura

CVE-2026-107187

What is CVE-2026-107187?

A security flaw in Eptura Archibus allows users to gain unauthorized access to sensitive database information, including usernames and passwords. By crafting a specific DWR request based on a defined workflow rule, an attacker can exploit this authentication bypass vulnerability to perform database read operations without the need for valid authentication. Furthermore, there is a potential risk for database write and delete actions, although these have not been tested. Organizations using Archibus should promptly evaluate their systems and apply necessary updates to mitigate this risk.

References