CVE-2026-107187

HighCVSS 8.5

Published: 19/10/2026(UTC)Updated: 20/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

19th percentile - higher than 19% of all known CVEs

Summary

A user can access any database details, such as usernames and passwords, by sending a DWR request with a specified workflow rule. The authentication bypass vulnerability can be chained with this vulnerability to perform database reads without authentication; database write and delete operations may also be possible, but this was untested.

Risk Assessment

An attacker could obtain database credentials and potentially modify or delete data, leading to full system compromise and data leakage.

Recommendation

Apply the vendor patch, restrict access to DWR endpoints, and verify and rotate any database credentials that may have been exposed.

Other vulnerabilities in DWR

CVE-2026-107186High
An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule. This allows for workflow rules to be run without authentication.

Original NVD description (English source)

A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication bypass vulnerability can be chained with this vulnerability to perform database reads without authentication. Database write and delete operations may also be possible, but this was untested.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS