Product by LabRedesCefetRJ

    LabRedesCefetRJ WeGIA

    187 known vulnerabilities in LabRedesCefetRJ WeGIA (LabRedesCefetRJ), 0 of them actively exploited (CISA KEV).

    Key figures

    187

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    67

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in LabRedesCefetRJ WeGIA (LabRedesCefetRJ)
    CriticalCVE-2026-28409

    WeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injection

    also in 1 other product

    		10.0
    CriticalCVE-2025-50201

    WeGIA OS Command Injection in debug_info.php parameter 'branch'

    also in 1 other product

    		9.8
    CriticalCVE-2026-28411

    WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`

    also in 1 other product

    		9.8
    CriticalCVE-2025-27140

    WeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE)

    also in 1 other product

    		9.8
    CriticalCVE-2025-26613

    OS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIA

    also in 1 other product

    		9.8
    CriticalCVE-2025-55169

    WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'

    also in 1 other product

    		6.5
    CriticalCVE-2026-54670

    WeGIA: Unauthenticated Auth Bypass + Local File Inclusion

    		9.1
    CriticalCVE-2026-54767

    WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php

    		9.1
    CriticalCVE-2026-55683

    WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php

    		9.8
    CriticalCVE-2026-55680

    WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter

    		9.8
    CriticalCVE-2026-55684

    WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php

    		9.8
    HighCVE-2026-55681

    WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter

    		8.8
    HighCVE-2026-54671

    WeGIA: Authorization Bypass via Empty Resource Array in InternoControle

    		8.8
    CriticalCVE-2025-62360

    LabRedesCefetRJ WeGIA: SQL Injection

    also in 1 other product

    		8.8
    CriticalCVE-2025-58745

    LabRedesCefetRJ WeGIA: Code Injection

    also in 1 other product

    		10.0
    CriticalCVE-2025-58159

    WeGIA Authenticated Arbitrary File Upload Leading To Remote Code Execution (RCE)

    also in 1 other product

    		10.0
    CriticalCVE-2025-26615

    Path Traversal endpoint 'examples.php' parameter 'src' in WeGIA

    also in 1 other product

    		10.0
    HighCVE-2026-55682

    LabRedesCefetRJ WeGIA: Session Fixation

    		8.1
    CriticalCVE-2026-28408

    WeGIA lacks authentication verification in adicionar_tipo_docs_atendido.php

    also in 1 other product

    		9.8
    CriticalCVE-2025-26616

    Path Traversal endpoint 'exportar_dump.php' parameter 'file' in WeGIA

    also in 1 other product

    		7.5
    CriticalCVE-2025-30364

    WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario

    also in 1 other product

    		9.8
    CriticalCVE-2025-30365

    SQL Injection in query_geracao_auto.php

    also in 1 other product

    		9.8
    HighCVE-2026-76633

    WeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenha

    		8.1
    MediumCVE-2026-55679

    WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection

    		6.5
    CriticalCVE-2025-53823

    LabRedesCefetRJ WeGIA: SQL Injection

    also in 1 other product

    		8.8

    All vulnerabilities in search

    All products by LabRedesCefetRJ