CVE-2026-107188

Vendor

Rapid7

Product

InsightVM / Nexpose / Metasploit

CVSS

9.6

EPSS

0.004 (p32)

Exposure class

Network management

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   Research Rapid7 12d ago

   Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)

   Overview While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered three new vulnerabilities in Eptura Archibus . A legacy API endpoint could be exploited to bypass…

   CVSS 8.6 CVE-2026-107186CVE-2026-107187CVE-2026-107188 Rapid7
2. 24
   CVE NVD 12d ago

   A user can upload export reports with any file contents and specify any contents.

   A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution.…

   CVSS 9.6 CVE-2026-107188