Threat database

Adobe Substance 3D Stager contains a Use After Free vulnerability (CWE-416) that may allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS v3.1 base score is 7.8, indicating high severity.

CVE-2026-63147 is a stored cross-site scripting (XSS) vulnerability in Omnispace Agora Project versions before 26.10.0. Authenticated users can upload files with malicious script embedded in the filename, which bypasses filtering mechanisms because filenames are processed via $_FILES instead of $_GET/$_POST. This unsanitized filename is stored and later rendered to other users, enabling script execution in their browsers.

CVE-2026-63172 is a broken access control vulnerability in Omnispace Agora Project versions before 26.10.0. It allows non-administrative users to create new user accounts by bypassing authorization checks in the user-edit action. This flaw can lead to privilege escalation by unauthorized account creation.

Omnispace Agora Project versions before 26.10.0 contain a session fixation vulnerability. This flaw allows remote attackers to hijack authenticated sessions by setting a known session identifier in a victim's browser before login. The application does not regenerate the session ID upon successful authentication, enabling attackers to access the victim's session after login.

CVE-2026-63174 is a broken access control vulnerability in Omnispace Agora Project versions before 26.10.0. It allows a space administrator to assign users to spaces outside their authorized scope due to missing authorization checks in the spaceAffectList affectation process. Specifically, the import flow's join INSERT operation lacks a readRight() verification, enabling attackers to break tenant isolation and manipulate user-space assignments across unauthorized spaces.

Microsoft's October 2026 Patch Tuesday addresses a record 1,411 vulnerabilities, including three zero-day flaws—one actively exploited and two publicly disclosed. This update is significant due to the volume of fixes and the presence of zero-day vulnerabilities requiring attention.

CVE-2026-63153 is a high-severity authorization bypass vulnerability in Omnispace Agora Project versions before 26.10.0. It exists in the setAffectations() function, where authenticated users can add access-right records for target spaces without proper verification of their rights. This flaw breaks tenant isolation by allowing attackers to assign access to spaces they do not own or control, leading to unauthorized access to restricted areas.

Omnispace Agora Project versions before 26.10.0 contain a SQL injection vulnerability in the calendar module. The flaw arises from unsanitized user input in the sortEvents parameter, which is directly concatenated into an SQL ORDER BY clause. This allows attackers to perform error-based SQL injection attacks to extract sensitive database information, including version details. The vulnerability has a high severity rating with a CVSS score of 8.6. No official patch or remediation details are provided in the input data.

Omnispace Agora Project versions before 26.10.0 contain a second-order SQL injection vulnerability via the _idCategoryFilter parameter. Authenticated attackers can inject malicious SQL that is stored in the session and later executed when the filter is applied, potentially leading to unauthorized database access or manipulation. The vulnerability has a high severity with a CVSS 4.0 score of 8.6.

CVE-2026-63163 is a broken access control vulnerability in Omnispace Agora Project versions before 26.10.0. It allows unauthenticated attackers to bypass authorization on the MobileFileDownload route by using an md5 hash of the filename as a token. This enables attackers to download arbitrary protected files without proper authorization, resulting in unauthorized information disclosure.

Omnispace Agora Project versions before 26.10.0 have a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory by manipulating the tmpFolderName parameter. This can lead to remote code execution if an attacker writes malicious files to the web root or other sensitive locations.

Adobe Dimension contains a cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This flaw allows a local attacker with user permissions to execute arbitrary code in the context of the current user. Exploitation requires user interaction, specifically that the victim runs the application. The vulnerability affects Adobe Dimension versions from 0 up to and including 4.1.8. The vulnerability has a high severity rating with a CVSS score of 8.6.

Adobe Dimension contains an Uncontrolled Search Path Element vulnerability (CWE-427) that allows a local attacker with user permissions to execute arbitrary code by tricking a user into running the application. The vulnerability affects versions from 0 up to and including 4.1.8. Exploitation requires user interaction and changes the security scope. The CVSS 3.1 score is 8.6, indicating a high severity risk.

Adobe Dimension contains a NULL Pointer Dereference vulnerability (CWE-476) that can cause the application to crash, resulting in denial-of-service. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 4.1.8. The CVSS score is 5.5, indicating medium severity.

Adobe Dimension contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 4.1.8. The CVSS 3.1 base score is 7.8, indicating high severity.

Adobe Dimension contains a stack-based buffer overflow vulnerability (CWE-121) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 4.1.8. The CVSS 3.1 score is 7.8, indicating high severity.

Adobe Dimension contains an out-of-bounds read vulnerability (CWE-125) that could allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 4.1.8. The CVSS 3.1 base score is 5.5, indicating a medium severity level.

Adobe Dimension versions up to 4.1.8 are affected by an Untrusted Search Path vulnerability (CWE-426) that could allow a local attacker with user permissions to execute arbitrary code. Exploitation requires user interaction, specifically running the vulnerable application. The vulnerability impacts confidentiality, integrity, and availability, and changes the security scope.

CVE-2026-63154 is a SQL injection vulnerability in Omnispace Agora Project versions before 26.10.0. It allows a space administrator to escalate privileges by injecting malicious SQL column identifiers during the user import process. Attackers can exploit this flaw to set administrative flags and gain general administrator privileges.

Microsoft has released the Windows 10 KB5126657 extended security update as part of the October 2026 Patch Tuesday. This update includes multiple security fixes and some bug fixes and changes. No specific vulnerabilities or exploits are detailed in the provided information.