VULNERABILITY INTELLIGENCE

CVE-2026-23723

CVSS score7.2 HIGH

EPSS probability0.42%

CISA KEVNot currently listed

Published2026-01-16

Last modified2026-06-17

Description

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an authenticated SQL Injection vulnerability was identified in the Atendido_ocorrenciaControle endpoint via the id_memorando parameter. This flaw allows for full database exfiltration, exposure of sensitive PII, and potential arbitrary file reads in misconfigured environments. This vulnerability is fixed in 3.6.2.