Information Disclosure Vulnerability in WeGIA Web Manager for Charitable Institutions
CVE-2026-42871

6.9MEDIUM

Key Information:

Vendor

Labredescefetrj

Status
Wegia
Vendor
CVE Published:
11 May 2026

What is CVE-2026-42871?

The WeGIA web management application for charitable institutions suffers from an information disclosure vulnerability due to overly verbose error messages in the atendido/familiar_docfamiliar.php script. In versions prior to 3.7.0, these messages expose sensitive database-related information, which could be leveraged by attackers to gain insights into the backend infrastructure, subsequently expanding the attack surface. This flaw has been addressed in version 3.7.0.

Affected Version(s)

WeGIA < 3.7.0

References

https://github.com/LabRedesCefetRJ/WeGIA/security/advisor...
x_refsource_CONFIRM

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.