EUVD-2026-125583

Omnispace Agora Project through 26.10.0 contains an open redirect vulnerability that allows remote attackers to redirect users to arbitrary external URLs by manipulating the objUrl parameter in Ctrl.php's redir function. Attackers can craft login links with objUrl set to a malicious site, causing...

CVE-2026-63155

Omnispace Agora Project through 26.10.0 contains an open redirect vulnerability that allows remote attackers to redirect users to arbitrary external URLs by manipulating the objUrl parameter in Ctrl.php's redir function. Attackers can craft login links with objUrl set to a malicious site, causing...

CVE-2026-63155 Omnispace Agora Project 26.10.0 Open Redirect via objUrl Parameter

Omnispace Agora Project through 26.10.0 contains an open redirect vulnerability that allows remote attackers to redirect users to arbitrary external URLs by manipulating the objUrl parameter in Ctrl.php's redir function. Attackers can craft login links with objUrl set to a malicious site, causing...

CVE-2026-63155

The Omnispace Agora Project (through version 26.10.0 ) is vulnerable to an open redirect vulnerability. The root cause is located in the redir() function of Ctrl.php , where an attacker can manipulate the objUrl parameter to redirect users to arbitrary external URLs. By crafting malicious login l...