CVE-2026-107188

The Eptura Archibus software contains a vulnerability in the Workflow Rule component that allows for unauthenticated arbitrary file upload . An attacker can upload export reports containing malicious JSP code and specify a JSPX file extension. Because the uploaded file is accessible via a web bro...

CVE-2026-107188 Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this...

CVE-2026-107187 Eptura Archibus Workflow Rule Enables Unauthenticated Database Read of Sensitive Tables

A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication bypass vulnerability can be chained with this vulnerability to perform database reads without authentication. Database write and delete operations ma...

CVE-2026-107187

The Eptura Archibus platform is vulnerable to an unauthenticated database read via the AbCommonResources-getDataRecords workflow rule. An attacker can chain this with an authentication bypass in the isPasswordUppercase method to execute DWR requests without valid credentials. This allows unauthor...

CVE-2026-107186 Eptura Archibus Direct Web Remoting (DWR) API Authentication Bypass via Privileged Session Reuse

An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule. This allows for workflow rules to be run without authentication...

CVE-2026-107186

The Eptura Archibus Web Central web application contains an authentication bypass vulnerability in its Java Direct Web Remoting (DWR) API. An unauthenticated attacker can exploit a flaw where the isPasswordUppercase method (whitelisted for pre-auth access) sets a privileged user session in the th...

Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)

Overview While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered three new vulnerabilities in Eptura Archibus. A legacy API endpoint could be exploited to bypass authentication and run various functions without authentication CVSS: 8.6 High. Th...

PT-2026-117495

Name of the Vulnerable Software and Affected Versions Eptura Archibus versions prior to 2025.02 Description An unauthenticated arbitrary file upload issue allows attackers to upload files with any content, including JSP and JSPX scripts, via the export reports feature. Because these uploaded file...

Archibus Web Central Login - Panel Detect

Archibus Web Central login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Archibus Web Central login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Archibus Web Central Login -...

CVE-2025-25652

In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal...

CVE-2025-25652

In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal...

CVE-2025-25652

In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal...

CVE-2025-25652

In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal...

PT-2026-2449

Name of the Vulnerable Software and Affected Versions Eptura Archibus version 2024.03.01.109 Description The “Run script” and “Server File” components within the “Database Update Wizard” are susceptible to directory traversal. This allows unauthorized access to files and directories...

Eptura Archibus security vulnerability

Eptura Archibus is an all-in-one workspace management system platform from Eptura Corporation, USA. A security vulnerability exists in Eptura Archibus version 2024.03.01.109, which stems from a directory traversal in the Run script and Server File components of the Database Update Wizard...

CVE-2025-25652

In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal...

CVE-2025-25652

Eptura Archibus version 2024.03.01.109 is vulnerable to a directory traversal flaw within the Run script and Server File components of the Database Update Wizard . This vulnerability allows an attacker to gain unauthorized access to files and directories on the system. While technical details con...

CVE-2025-25652: Improper Limitation of a Pathname to a Restricted Directory

In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal...

CVE-2021-41555

In ARCHIBUS Web Central 21.3.3.815 a version from 2014, XSS occurs in /archibus/dwr/call/plaincall/workflow.runWorkflowRule.dwr because the data received as input from clients is re-included within the HTTP response returned by the application without adequate validation. In this way, if HTML cod...

📄 Eptura Archibus Directory Traversal

In Eptura Archibus versions before version 2025.01, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal. Title: Eptura Archibus Directory Traversal Description: In Eptura Archibus versions before v2025.01, the "Run script" and "Serve...