Omnispace vulnerabilities

Newest CVEs

• CVE-2026-63171

  Omnispace Agora Project < 26.10.0 Stored XSS via Category Description

  Omnispace · Agora Project

  Medium5.1
• CVE-2026-63169

  Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe

  Omnispace · Agora Project

  Medium5.3
• CVE-2026-63168

  Omnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array Bypass

  Omnispace · Agora Project

  Medium5.1
• CVE-2026-63157

  Omnispace Agora Project < 26.10.0 Stored XSS via Links Module

  Omnispace · Agora Project

  Medium5.1
• CVE-2026-63156

  Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl Parameter

  Omnispace · Agora Project

  Medium5.1
• CVE-2026-63148

  Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Filename

  Omnispace · Agora Project

  Medium5.1
• CVE-2026-63147

  Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name

  Omnispace · Agora Project

  Medium5.1
• CVE-2026-63172

  Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-Edit

  Omnispace · Agora Project

  High7.1
• CVE-2026-63161

  Omnispace Agora Project < 26.10.0 Session Fixation via Authentication

  Omnispace · Agora Project

  High8.6
• CVE-2026-63174

  Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectList

  Omnispace · Agora Project

  High8.6