Eptura
Vulnerability activity for Eptura: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 4
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 4
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 4
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- –UnscoredOct 19, 2026EpturaADV-cccs-df531b856e5bSerial Number: AV26-1062 Date: October 19, 2026 As of October 19, 2026, Eptura is affected by a vulnerability in the following product: Archibus Prior to 2025.02 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Eptura Archibus Archived Archibus Release Notes
- 9.6CriticalOct 19, 2026Eptura Archibus Path traversal / file handlingCVE-2026-107188A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this vulnerab
- 8.5HighOct 19, 2026Eptura Archibus Information disclosureCVE-2026-107187A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication bypass vulnerability can be chained with this vulnerability to perform database reads without authentication. Database write and delete operations may a
- 8.6HighOct 19, 2026Eptura Archibus Auth bypass / access controlCVE-2026-107186An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule. This allows for workflow rules to be run without authentication.
Top products
- Archibus3 CVEs in the last year, 1 critical
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- CCCS (Canada) · Oct 19, 2026Eptura security advisory (AV26-1062)ADV-cccs-df531b856e5b
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.