CVE-2026-63154 | Omnispace Agora Project up to 26.9.x User Import agoraFields[] sql injection

October 13, 2026 Yanac

A vulnerability described as problematic has been identified in Omnispace Agora Project up to 26.9.x. This impacts an unknown function of the component User Import. Executing a manipulation of the argument agoraFields[] can lead to sql injection.

This vulnerability appears as CVE-2026-63154. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More