CVE-2026-63148 | Omnispace Agora Project up to 26.9.x Dashboard Controller FILES cross site scripting

October 13, 2026 Yanac

A vulnerability classified as problematic has been found in Omnispace Agora Project up to 26.9.x. Impacted is an unknown function of the component Dashboard Controller. Performing a manipulation of the argument FILES results in cross site scripting.

This vulnerability is reported as CVE-2026-63148. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More