https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:48:21.051779+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280621 EUVD-2026-280621 2026-10-08T19:48:21.085559+00:00 EUVD-2026-280621 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35395 fkie_cve-2026-35395 2026-10-08T19:48:21.085594+00:00

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, WeGIA (Web gerenciador para instituições assistenciais) contains a SQL injection vulnerability in dao/memorando/DespachoDAO.php. The id_memorando parameter is extracted from $_REQUEST without validation and directly interpolated into SQL queries, allowing any authenticated user to execute arbitrary SQL commands against the database. This vulnerability is fixed in 3.6.9.