← All credits

Marcus Chang, Security Consultant, Rapid7

4 vulnerability records and advisories credit this contributor.

CVE-2026-107188

Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

CVE-2026-107187

Eptura Archibus Workflow Rule Enables Unauthenticated Database Read of Sensitive Tables

CVE-2026-107186

Eptura Archibus Direct Web Remoting (DWR) API Authentication Bypass via Privileged Session Reuse

CVE-2026-108065

Unauthenticated SQL Injection in Channel Software WebAlliance eCommerce