CVE-2026-107187
8.5HighPublished 19 Oct 2026 · NVD status: Received · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on confidentiality
- Weakness
- CWE-200
Impact
Attackers can extract sensitive database records, including usernames and passwords, and potentially execute write or delete actions. Network access with a low-privileged account is required, though it can be chained with unauthenticated access.
Root cause
Improper access controls permit execution of database operations through specified Direct Web Remoting (DWR) workflow rules.
Affected systems
Eptura Archibus (exact versions not listed — check the vendor advisory).
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Fix & remediation
Upgrade Eptura Archibus to the patched release referenced in the Rapid7 advisory. If updating immediately is not possible, restrict network access to the Archibus application and block untrusted calls to the DWR endpoint.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication bypass vulnerability can be chained with this vulnerability to perform database reads without authentication. Database write and delete operations may also be possible, but this was untested.