Vulnerabilities
WeGIA Session Flaw Lets Attackers Hijack Accounts and Leak DB Host
A vulnerability in WeGIA below version 3.8.6 allows session hijacking and internal host disclosure, with a patch now available for deployment.
WeGIA
Everything Vuln Post has reported about WeGIA: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
WeGIA SQLi CVE-2026-55683: 3.8.6 Stops Remote Attackers From Manipulating Credentials and Billing Data
LabRedesCefetRJ WeGIA 3.8.6 patches a critical flaw allowing remote attackers to manipulate billing data and credentials via unsanitized inputs.
Vulnerabilities
WeGIA Critical SQL Injection CVE-2026-55684 Fixed in 3.8.6 Update for Charity Management App
LabRedesCefetRJ released version 3.8.6 to fix CVE-2026-55684, a CVSS 9.8 critical SQL injection vulnerability in the WeGIA charity management web application that allowed remote attackers to manipulate database records without authentication.