[ Vendor · 3 CVEs ]
Eptura
CVEs affecting Eptura published in the last 30 days, plus any Eptura CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-107188 | 19 Oct 2026 | CVSS 9.6 | Eptura ArchibusA user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file… | |
| CVE-2026-107186 | 19 Oct 2026 | CVSS 8.6 | Eptura ArchibusAn unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow… | |
| CVE-2026-107187 | 19 Oct 2026 | CVSS 8.5 | Eptura ArchibusA user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication… |