Open Redirect Vulnerability in WeGIA Web Manager for Charitable Institutions

CVE-2026-23726

What is CVE-2026-23726?

WeGIA, a web management application for charitable organizations, contains an Open Redirect vulnerability in the /WeGIA/controle/control.php endpoint. This weakness arises from the insufficient validation of the nextPage parameter, combined with specific input values, allowing attackers to redirect users to arbitrary external sites. Such a flaw can be exploited for various malicious activities, including phishing attacks, credential theft, malware distribution, and social engineering, all leveraging the perceived trustworthiness of the WeGIA domain. The issue has been resolved in version 3.6.2.

References