CVE-2026-107186

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 19, 2026

Last Seen

October 19, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities Found in Eptura Archibus Software55.0

Rapid7 identified three significant vulnerabilities in Eptura Archibus, a software used by over 16,000 organizations, including 40% of the Fortune 500. The vulnerabilities include an authentication bypass (CVE-2026-107186, CVSS 8.6), a full database read capability (CVE-2026-107187, CVSS 8.5), and a...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Vulnerabilities Found in Eptura Archibus Software

4d ago·1 sources

Related Entities

Data Breach Archibus Eptura Rapid7 CVE-2026-107187 CVE-2026-107188 CWE-200 - Exposure of Sensitive Information CWE-287 - Improper Authentication CWE-434 - Unrestricted Upload Of File With Dangerous Type Archibus Authentication Bypass Archibus Database Read Archibus Unrestricted File Upload

CVE-2026-107186

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical Vulnerabilities Found in Eptura Archibus Software

Related Articles (1)

Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)

Related Entities