Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: LabRedesCefetRJ WeGIA 3.9.2 Clear all filters
TI-2026-53548 CVE-2026-76634 · GHSA-56r8-9xc4-3g79

WeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.php

Priority MEDIUM 64

WeGIA before 3.9.2 contains an insecure direct object reference vulnerability in the employee profile page that allows authenticated attackers to access arbitrary employee records by injecting an id_pessoa parameter thro…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00402 Published 2026-08-20 Fixed in 3.9.2 CWE-639
TI-2026-53547 CVE-2026-76633 · GHSA-8248-cv95-x854

WeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenha

Priority MEDIUM 40

WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any authenticated user to change their account password without providing existing credentials by exploiting the u…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00438 Published 2026-08-20 Fixed in 3.9.2 CWE-620