CVE-2026-107187

Vendor

Rapid7

Product

InsightVM / Nexpose / Metasploit

CVSS

8.5

EPSS

0.004 (p32)

Exposure class

Network management

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   Research Rapid7 12d ago

   Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)

   Overview While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered three new vulnerabilities in Eptura Archibus . A legacy API endpoint could be exploited to bypass…

   CVSS 8.6 CVE-2026-107186CVE-2026-107187CVE-2026-107188 Rapid7
2. 10
   CVE NVD 12d ago

   A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule.

   A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication bypass vulnerability can be chained with this vulnerability to perform database…

   CVSS 8.5 CVE-2026-107187