CVE-2026-107188

9.6 Critique

Publiée le 19/10/2026 à 19:17 · Modifiée le 20/10/2026 à 22:17 · Analyse NVD reportée · Source : cve@rapid7.com

Description

A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this vulnerability to run code on the server without authentication.

Traduire en français

Produits concernés

Eptura Archibus

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.6 Critique	cve@rapid7.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N`

Faiblesses (CWE)

CWE-434

Références

https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories