Vulnerabilities

TI-2026-59059 CVE-2026-86274 · GHSA-92g4-p7r6-w4j8

projeto-siga Authentication Flow ExAutenticacaoController.java ExAutenticacaoController.autenticar authorization

HIGH 70

A security vulnerability has been detected in projeto-siga siga up to 11.0.2.10/11.0.2.13/11.1.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00743 Published 2026-09-07 No fix listed CWE-862

TI-2026-59058 CVE-2026-86273 · GHSA-pcw6-8cpc-9hvx

HIGH 70

A weakness has been identified in projeto-siga siga up to 11.1.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00495 Published 2026-09-07 No fix listed CWE-918

TI-2026-06118 CVE-2026-6990 · GHSA-54f6-jgjm-5r6h

MEDIUM 56

A vulnerability was found in projeto-siga siga 11.0.3.18.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00249 Published 2026-04-25 No fix listed CWE-79