https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 23:16:46 +0000 https://db.gcve.eu/vuln/cve-2026-63158 <p><strong>Affected:</strong> Omnispace Agora Project</p> <p>Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user&#39;s stored bcrypt password hash to authenticate as that user without knowing the actual password, caused by the legacy AGORAP_LOG/AGORAP_PASS cookie mechanism treating the stored hash as a directly replayable bearer credential. Attackers can set the AGORAP_LOG/AGORAP_PASS cookies with a stolen password hash to impersonate any user, including administrators, and gain unauthorized access to the application.</p> <p><strong>Affected:</strong> Omnispace Agora Project</p> <p>Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user&#39;s stored bcrypt password hash to authenticate as that user without knowing the actual password, caused by the legacy AGORAP_LOG/AGORAP_PASS cookie mechanism treating the stored hash as a directly replayable bearer credential. Attackers can set the AGORAP_LOG/AGORAP_PASS cookies with a stolen password hash to impersonate any user, including administrators, and gain unauthorized access to the application.</p> https://db.gcve.eu/vuln/cve-2026-63158