CVE-2026-107186

HighCVSS 8.6

Published: 19/10/2026(UTC)Updated: 20/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

29th percentile - higher than 29% of all known CVEs

Summary

An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule. This allows for workflow rules to be run without authentication.

Risk Assessment

Lack of authentication when running workflow rules may allow an attacker to perform unauthorized actions in the system, potentially compromising integrity and confidentiality.

Recommendation

Install the vendor patch and restrict access to DWR endpoints and workflow rules to trusted networks.

Other vulnerabilities in DWR

CVE-2026-107187High
A user can access any database details, such as usernames and passwords, by sending a DWR request with a specified workflow rule. The authentication bypass vulnerability can be chained with this vulnerability to perform database reads without authentication; database write and delete operations may also be possible, but this was untested.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS