https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T14:47:39.281393+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-23723 CVE-2026-23723 — WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter 2026-10-18T14:47:39.302444+00:00

Affected: LabRedesCefetRJ WeGIA

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an authenticated SQL Injection vulnerability was identified in the Atendido_ocorrenciaControle endpoint via the id_memorando parameter. This flaw allows for full database exfiltration, exposure of sensitive PII, and potential arbitrary file reads in misconfigured environments. This vulnerability is fixed in 3.6.2.