Threats Tagged 'cve-2025-67077'
View all threats tagged with 'cve-2025-67077'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-67077'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-67077 is a high-severity file upload vulnerability affecting Omnispace Agora Project versions before 25.10. It allows authenticated users, and under certain conditions guest users, to upload files via the UploadTmpFile action without sufficient validation. This vulnerability can lead to full compromise of confidentiality, integrity, and availability of affected systems. Exploitation requires low attack complexity and no user interaction, making it highly dangerous. Although no known exploits are currently in the wild, the vulnerability's characteristics suggest a significant risk if weaponized. European organizations using Omnispace Agora Project are at risk, especially those with exposed or internet-facing instances. Mitigation requires immediate patching once available and implementing strict file upload validation and access controls. Countries with higher adoption of Omnispace Agora Project and critical infrastructure reliance on it are most likely to be targeted. Due to the high impact and ease of exploitation, this vulnerability demands urgent attention from defenders. Join the discussion | CVE Database V5 | 01/15/2026, 00:00:00 UTC Added: 01/15/2026, 15:33:13 UTC |
Showing 1 to 1 of 1 result