CVE-2026-63164 | Omnispace Agora Project up to 26.10.0 Mail Object Reference CtrlMail.php Ctrl::getCurObj reloadMailTypeId authorization

A vulnerability categorized as problematic has been discovered in Omnispace Agora Project up to 26.10.0. Impacted is the function Ctrl::getCurObj of the file CtrlMail.php of the component Mail Object Reference. Executing a manipulation of the argument reloadMailTypeId can lead to authorization bypass.

This vulnerability is registered as CVE-2026-63164. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More