Full Report
Eptura security advisory (AV26-1062)
Analysis Summary
# Vulnerability: Eptura Archibus Security Advisory (AV26-1062)
## CVE Details
- CVE ID: Not provided in source
- CVSS Score: Not provided in source
- CWE: Not provided in source
## Affected Systems
- Products: Eptura Archibus
- Versions: Archibus versions prior to 2025.02
- Configurations: Not specified in source
## Vulnerability Description
The source is a Canadian Cyber Centre advisory (serial AV26-1062, dated October 19, 2026) stating that Eptura is affected by a vulnerability in Archibus prior to 2025.02. It does not describe the flaw's nature, root cause, or affected components.
## Exploitation
- Status: Not specified in source
- Complexity: Not specified in source
- Attack Vector: Not specified in source
## Impact
- Confidentiality: Not specified in source
- Integrity: Not specified in source
- Availability: Not specified in source
## Remediation
### Patches
- Upgrade Archibus to version 2025.02 or later. The advisory lists "prior to 2025.02" as affected, which implies 2025.02 contains the fix, but the source does not state this explicitly.
- The Cyber Centre advises applying "any necessary updates as they become available." Check the vendor release notes for patch details.
### Workarounds
- None identified in source.
## Detection
- Indicators of compromise: None provided in source.
- Detection methods and tools: None provided in source. Inventory Archibus deployments and confirm their versions against the 2025.02 threshold.
## References
- Canadian Cyber Centre advisory: cyber[.]gc[.]ca/en/alerts-advisories/eptura-security-advisory-av26-1062
- Eptura Archibus product page: eptura[.]com/our-platform/archibus/
- Archived Archibus Release Notes: knowledge[.]eptura[.]com/Archibus/Product_Information/Archived_Archibus_Release_Notes
**Analyst note:** This advisory is sparse. It lacks a CVE, CVSS score, technical details, and exploitation status. Before prioritizing, consult the vendor's security bulletin or the release notes for the 2025.02 release, and check NVD or CVE databases for a CVE assignment.