Login Request a demo
AR
Product
Archibus
by Eptura · last CVE Oct 19, 2026
6
CVEs
0
On KEV
9.6
Max CVSS
3
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 4Medium 1Low 0
Severity
All severities6Critical1High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Archibus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-107188
9.6
0%
Oct 19
Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution
Affected: before 2025.02
CVE-2026-107186
8.6
0%
Oct 19
Eptura Archibus Direct Web Remoting (DWR) API Authentication Bypass via Privileged Session Reuse
Affected: before 2025.02
CVE-2026-107187
8.5
0%
Oct 19
Eptura Archibus Workflow Rule Enables Unauthenticated Database Read of Sensitive Tables
Affected: before 2025.02
CVE-2023-48645
7.8
0%
Feb 2
An issue was discovered in the Archibus app 4.0.3 for iOS
Affected: 4.0.3
CVE-2025-25652
7.5
1%
Jan 13
In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal
Affected: 2024.03.01.109
CVE-2023-48644
6.1
0%
Mar 5
An issue was discovered in the Archibus app 4.0.3 for iOS
Affected: 4.0.3
Showing 6