Vulnerabilities
Rapid7 Finds Critical Remote Code Execution Flaw in Eptura Archibus
A legacy API endpoint in Eptura Archibus allows unauthenticated remote code execution and full database reads, affecting thousands of global enterprises.
Archibus
Everything Threat Times has reported about Archibus: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVE-2026-107188: Eptura Archibus Pre-2025.02 Suffers Critical Unauthenticated RCE Via JSP
CVE-2026-107188 allows attackers to run server commands via report uploads in Eptura Archibus versions prior to 2025.02.