Open Redirect Vulnerability in WeGIA Web Manager by LabRedesCefetRJ

CVE-2026-35473

What is CVE-2026-35473?

The WeGIA web manager for charitable institutions contains an Open Redirect vulnerability that exists in the /WeGIA/controle/control.php endpoint. Specifically, the flaw is found in the nextPage parameter, which does not properly validate or limit input. Attackers can exploit this weakness by manipulating the parameter, allowing them to redirect users to arbitrary external websites. This could lead to serious security risks, including phishing attacks, credential theft, and malware distribution, leveraging the trusted WeGIA domain to deceive users. The issue has been resolved in version 3.6.9.

References