{"schema_version":1,"title":"Omnispace vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 21 vulnerabilities in Omnispace: 0 in the last 7 days and 21 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-63171, was published on 13 October 2026. 21 vulnerabilities in the last four weeks, up from none in the four before. 1 critical against 0. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/omnispace","json_url":"https://junglewise.ai/threats/vendors/omnispace.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/omnispace","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":13,"all_time":21,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":21,"last_365_days":21},"latest":[{"cve":"CVE-2026-63171","cvss":5.4,"epss":0.0022,"slug":"cve-2026-63171-omnispace-agora-project-before-26-10-0-contains-a-stored-cross","title":"Omnispace Agora Project stored cross-site scripting in forum","severity":"medium","exploited":false,"published_at":"2026-10-13T21:17:41.027+00:00","url":"https://junglewise.ai/threats/cve-2026-63171-omnispace-agora-project-before-26-10-0-contains-a-stored-cross"},{"cve":"CVE-2026-63169","cvss":6.4,"epss":0.0029,"slug":"cve-2026-63169-omnispace-agora-project-before-26-10-0-contains-a-stored-cross","title":"Omnispace Agora Project stored cross-site scripting in messenger","severity":"medium","exploited":false,"published_at":"2026-10-13T21:17:40.893+00:00","url":"https://junglewise.ai/threats/cve-2026-63169-omnispace-agora-project-before-26-10-0-contains-a-stored-cross"},{"cve":"CVE-2026-63168","cvss":5.4,"epss":0.0028,"slug":"cve-2026-63168-omnispace-agora-project-before-26-10-0-contains-a-stored-cross","title":"Omnispace Agora Project stored cross-site scripting in LDAP import","severity":"medium","exploited":false,"published_at":"2026-10-13T21:17:40.763+00:00","url":"https://junglewise.ai/threats/cve-2026-63168-omnispace-agora-project-before-26-10-0-contains-a-stored-cross"},{"cve":"CVE-2026-63157","cvss":5.4,"epss":0.0022,"slug":"cve-2026-63157-omnispace-agora-project-before-26-10-0-contains-a-stored-cross","title":"Omnispace Agora Project stored cross-site scripting in Links module","severity":"medium","exploited":false,"published_at":"2026-10-13T21:17:40.383+00:00","url":"https://junglewise.ai/threats/cve-2026-63157-omnispace-agora-project-before-26-10-0-contains-a-stored-cross"},{"cve":"CVE-2026-63156","cvss":6.1,"epss":0.003,"slug":"cve-2026-63156-omnispace-agora-project-before-26-10-0-contains-a-reflected-cross","title":"Omnispace Agora Project reflected XSS in visioUrl parameter","severity":"medium","exploited":false,"published_at":"2026-10-13T21:17:40.243+00:00","url":"https://junglewise.ai/threats/cve-2026-63156-omnispace-agora-project-before-26-10-0-contains-a-reflected-cross"},{"cve":"CVE-2026-63174","cvss":8.1,"epss":0.0025,"slug":"cve-2026-63174-omnispace-agora-project-before-26-10-0-contains-a-broken-access","title":"Omnispace Agora Project broken access control in user assignment","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:32.217+00:00","url":"https://junglewise.ai/threats/cve-2026-63174-omnispace-agora-project-before-26-10-0-contains-a-broken-access"},{"cve":"CVE-2026-63172","cvss":7.1,"epss":0.0021,"slug":"cve-2026-63172-omnispace-agora-project-before-26-10-0-contains-a-broken-access","title":"Omnispace Agora Project broken access control in user creation","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:32.08+00:00","url":"https://junglewise.ai/threats/cve-2026-63172-omnispace-agora-project-before-26-10-0-contains-a-broken-access"},{"cve":"CVE-2026-63165","cvss":8.1,"epss":0.0031,"slug":"cve-2026-63165-omnispace-agora-project-before-26-10-0-contains-a-sql-injection","title":"Omnispace Agora Project SQL injection in calendar","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:31.947+00:00","url":"https://junglewise.ai/threats/cve-2026-63165-omnispace-agora-project-before-26-10-0-contains-a-sql-injection"},{"cve":"CVE-2026-63163","cvss":7.5,"epss":0.0036,"slug":"cve-2026-63163-omnispace-agora-project-before-26-10-0-contains-a-broken-access","title":"Omnispace Agora Project broken access control in MobileFileDownload","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:31.817+00:00","url":"https://junglewise.ai/threats/cve-2026-63163-omnispace-agora-project-before-26-10-0-contains-a-broken-access"},{"cve":"CVE-2026-63162","cvss":8.8,"epss":0.0071,"slug":"cve-2026-63162-omnispace-agora-project-before-26-10-0-contains-a-path-traversal","title":"Omnispace Agora Project path traversal in file upload","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:31.687+00:00","url":"https://junglewise.ai/threats/cve-2026-63162-omnispace-agora-project-before-26-10-0-contains-a-path-traversal"},{"cve":"CVE-2026-63161","cvss":8.8,"epss":0.0038,"slug":"cve-2026-63161-omnispace-agora-project-before-26-10-0-contains-a-session","title":"Omnispace Agora Project session fixation vulnerability","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:31.55+00:00","url":"https://junglewise.ai/threats/cve-2026-63161-omnispace-agora-project-before-26-10-0-contains-a-session"},{"cve":"CVE-2026-63160","cvss":7.4,"epss":0.0033,"slug":"cve-2026-63160-omnispace-agora-project-before-26-10-0-contains-a-vulnerability","title":"Omnispace Agora Project plaintext remember-me token storage","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:31.42+00:00","url":"https://junglewise.ai/threats/cve-2026-63160-omnispace-agora-project-before-26-10-0-contains-a-vulnerability"},{"cve":"CVE-2026-63159","cvss":7.4,"epss":0.0033,"slug":"cve-2026-63159-omnispace-agora-project-before-26-10-0-contains-a-predictable","title":"Omnispace Agora Project predictable password-reset token","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:31.273+00:00","url":"https://junglewise.ai/threats/cve-2026-63159-omnispace-agora-project-before-26-10-0-contains-a-predictable"},{"cve":"CVE-2026-63158","cvss":7.4,"epss":0.0041,"slug":"cve-2026-63158-omnispace-agora-project-before-26-10-0-contains-an-authentication","title":"Omnispace Agora Project authentication bypass in cookie handler","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:31.143+00:00","url":"https://junglewise.ai/threats/cve-2026-63158-omnispace-agora-project-before-26-10-0-contains-an-authentication"},{"cve":"CVE-2026-63154","cvss":8.8,"epss":0.0043,"slug":"cve-2026-63154-omnispace-agora-project-before-26-10-0-contains-a-sql-identifier","title":"Omnispace Agora Project SQL identifier injection in user import","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:31.01+00:00","url":"https://junglewise.ai/threats/cve-2026-63154-omnispace-agora-project-before-26-10-0-contains-a-sql-identifier"},{"cve":"CVE-2026-63153","cvss":8.1,"epss":0.0029,"slug":"cve-2026-63153-omnispace-agora-project-before-26-10-0-contains-a-broken-access","title":"Omnispace Agora Project access control bypass in setAffectations","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:30.88+00:00","url":"https://junglewise.ai/threats/cve-2026-63153-omnispace-agora-project-before-26-10-0-contains-a-broken-access"},{"cve":"CVE-2026-63152","cvss":8.1,"epss":0.0031,"slug":"cve-2026-63152-omnispace-agora-project-before-26-10-0-contains-a-second-order","title":"Omnispace Agora Project SQL injection in category filter","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:30.75+00:00","url":"https://junglewise.ai/threats/cve-2026-63152-omnispace-agora-project-before-26-10-0-contains-a-second-order"},{"cve":"CVE-2026-63149","cvss":7.4,"epss":0.0037,"slug":"cve-2026-63149-omnispace-agora-project-before-26-10-0-contains-an-insecure","title":"Omnispace Agora Project weak password generation in account creation","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:30.617+00:00","url":"https://junglewise.ai/threats/cve-2026-63149-omnispace-agora-project-before-26-10-0-contains-an-insecure"},{"cve":"CVE-2026-63148","cvss":5.4,"epss":0.0018,"slug":"cve-2026-63148-omnispace-agora-project-before-26-10-0-contains-a-stored-cross","title":"Omnispace Agora Project stored cross-site scripting in file upload","severity":"medium","exploited":false,"published_at":"2026-10-13T20:17:30.487+00:00","url":"https://junglewise.ai/threats/cve-2026-63148-omnispace-agora-project-before-26-10-0-contains-a-stored-cross"},{"cve":"CVE-2026-63147","cvss":5.4,"epss":0.0021,"slug":"cve-2026-63147-omnispace-agora-project-before-26-10-0-contains-a-stored-cross","title":"Omnispace Agora Project stored cross-site scripting in file upload","severity":"medium","exploited":false,"published_at":"2026-10-13T20:17:30.35+00:00","url":"https://junglewise.ai/threats/cve-2026-63147-omnispace-agora-project-before-26-10-0-contains-a-stored-cross"},{"cve":"CVE-2026-63146","cvss":9.8,"epss":0.0066,"slug":"cve-2026-63146-omnispace-agora-project-before-26-10-0-contains-a-code-injection","title":"Omnispace Agora Project code injection in config file","severity":"critical","exploited":false,"published_at":"2026-10-13T20:17:30.21+00:00","url":"https://junglewise.ai/threats/cve-2026-63146-omnispace-agora-project-before-26-10-0-contains-a-code-injection"}],"vendor":{"hub":true,"name":"Omnispace","slug":"omnispace","description":"Satellite communications and space technology company.","url":"https://junglewise.ai/threats/vendors/omnispace"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":1,"exploited":0,"vulnerabilities":21},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-63146","cvss":9.8,"epss":0.0066,"slug":"cve-2026-63146-omnispace-agora-project-before-26-10-0-contains-a-code-injection","title":"Omnispace Agora Project code injection in config file","severity":"critical","exploited":false,"published_at":"2026-10-13T20:17:30.21+00:00","url":"https://junglewise.ai/threats/cve-2026-63146-omnispace-agora-project-before-26-10-0-contains-a-code-injection"},{"cve":"CVE-2026-63162","cvss":8.8,"epss":0.0071,"slug":"cve-2026-63162-omnispace-agora-project-before-26-10-0-contains-a-path-traversal","title":"Omnispace Agora Project path traversal in file upload","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:31.687+00:00","url":"https://junglewise.ai/threats/cve-2026-63162-omnispace-agora-project-before-26-10-0-contains-a-path-traversal"},{"cve":"CVE-2026-63154","cvss":8.8,"epss":0.0043,"slug":"cve-2026-63154-omnispace-agora-project-before-26-10-0-contains-a-sql-identifier","title":"Omnispace Agora Project SQL identifier injection in user import","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:31.01+00:00","url":"https://junglewise.ai/threats/cve-2026-63154-omnispace-agora-project-before-26-10-0-contains-a-sql-identifier"},{"cve":"CVE-2026-63161","cvss":8.8,"epss":0.0038,"slug":"cve-2026-63161-omnispace-agora-project-before-26-10-0-contains-a-session","title":"Omnispace Agora Project session fixation vulnerability","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:31.55+00:00","url":"https://junglewise.ai/threats/cve-2026-63161-omnispace-agora-project-before-26-10-0-contains-a-session"},{"cve":"CVE-2026-63165","cvss":8.1,"epss":0.0031,"slug":"cve-2026-63165-omnispace-agora-project-before-26-10-0-contains-a-sql-injection","title":"Omnispace Agora Project SQL injection in calendar","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:31.947+00:00","url":"https://junglewise.ai/threats/cve-2026-63165-omnispace-agora-project-before-26-10-0-contains-a-sql-injection"},{"cve":"CVE-2026-63152","cvss":8.1,"epss":0.0031,"slug":"cve-2026-63152-omnispace-agora-project-before-26-10-0-contains-a-second-order","title":"Omnispace Agora Project SQL injection in category filter","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:30.75+00:00","url":"https://junglewise.ai/threats/cve-2026-63152-omnispace-agora-project-before-26-10-0-contains-a-second-order"},{"cve":"CVE-2026-63153","cvss":8.1,"epss":0.0029,"slug":"cve-2026-63153-omnispace-agora-project-before-26-10-0-contains-a-broken-access","title":"Omnispace Agora Project access control bypass in setAffectations","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:30.88+00:00","url":"https://junglewise.ai/threats/cve-2026-63153-omnispace-agora-project-before-26-10-0-contains-a-broken-access"},{"cve":"CVE-2026-63174","cvss":8.1,"epss":0.0025,"slug":"cve-2026-63174-omnispace-agora-project-before-26-10-0-contains-a-broken-access","title":"Omnispace Agora Project broken access control in user assignment","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:32.217+00:00","url":"https://junglewise.ai/threats/cve-2026-63174-omnispace-agora-project-before-26-10-0-contains-a-broken-access"},{"cve":"CVE-2026-63163","cvss":7.5,"epss":0.0036,"slug":"cve-2026-63163-omnispace-agora-project-before-26-10-0-contains-a-broken-access","title":"Omnispace Agora Project broken access control in MobileFileDownload","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:31.817+00:00","url":"https://junglewise.ai/threats/cve-2026-63163-omnispace-agora-project-before-26-10-0-contains-a-broken-access"},{"cve":"CVE-2026-63158","cvss":7.4,"epss":0.0041,"slug":"cve-2026-63158-omnispace-agora-project-before-26-10-0-contains-an-authentication","title":"Omnispace Agora Project authentication bypass in cookie handler","severity":"high","exploited":false,"published_at":"2026-10-13T20:17:31.143+00:00","url":"https://junglewise.ai/threats/cve-2026-63158-omnispace-agora-project-before-26-10-0-contains-an-authentication"}],"generated_at":"2026-11-13T03:07:00.155039+00:00","technologies":[{"name":"Omnispace Agora Project","slug":"agora-project","vulnerabilities":21,"url":"https://junglewise.ai/threats/technologies/agora-project"}]}