CVE-2026-107186: Eptura Archibus Direct Web Remoting (DWR) API Authentication Bypass via Privileged Session Reuse
An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule. This allows for workflow rules to be run without authentication.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any unauthenticated remote user who can reach the Archibus DWR API may exploit it. The vector is network-based and requires no privileges or user interaction.
What does exploitation require?
An attacker must send a DWR request that invokes isPasswordUppercase and then sets the next call method to run a workflow rule. This sequence can cause workflow rules to run without authentication.
What is the potential impact?
The supplied severity vector indicates high confidentiality impact and changed scope, while integrity and availability impacts are not indicated. The described direct effect is unauthorized execution of workflow rules.