CVE-2026-63152
Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilter
CVSS score
8.6
EPSS probability
%0.3
Risk score
0.0
Published
2 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.7
CVE-2026-63162
Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter
O
Patch verifiedEPSS %1
9.3
CVE-2026-63146
Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php
O
Patch verifiedEPSS %1
8.7
CVE-2026-63154
Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[]
O
Patch verifiedEPSS %0
9.1
CVE-2026-63158
Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies
O
Patch verifiedEPSS %0
9.1
CVE-2026-63149
Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()
O
Patch verifiedEPSS %0
8.6
CVE-2026-63161
Omnispace Agora Project < 26.10.0 Session Fixation via Authentication
O
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-63152"