CVE-2026-63158: fallo crítico en Omnispace Agora Project
Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies
Publicada el · Actualizada el
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.1epss 0.4%
probabilidad de explotación
0.4%top 66% de las CVE
explotación observada
noninguna fuente lo reporta
Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user's stored bcrypt password hash to authenticate as that user without knowing the actual password, caused by the legacy AGORAP_LOG/AGORAP_PASS cookie mechanism treating the stored hash as a directly replayable bearer credential. Attackers can set the AGORAP_LOG/AGORAP_PASS cookies with a stolen password hash to impersonate any user, including administrators, and gain unauthorized access to the application.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Productos afectados
Omnispace · Agora ProjectCVEs relacionadas — Omnispace Agora Project
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-63162HIGHOmnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName ParameterEPSS 0.7%CVE-2026-63146CRITICALOmnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.phpEPSS 0.7%CVE-2026-63154HIGHOmnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[]EPSS 0.4%CVE-2026-63161HIGHOmnispace Agora Project < 26.10.0 Session Fixation via AuthenticationEPSS 0.4%CVE-2026-63149CRITICALOmnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()EPSS 0.4%CVE-2026-63163HIGHOmnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownloadEPSS 0.4%