CVE-2026-107188 — Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

CVE-2026-107188

Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution PUBLISHED

Description (CNA)

A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this vulnerability to run code on the server without authentication.

Affected (CNA)

Vendor / product	Versions
Eptura / Archibus	affected 0 before 2025.02

CWE

CWE-434

References

https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.