Known vulnerabilities in WeGIA

Vendor: LabReDeS
Software: WeGIA
Software CPE: cpe:2.3:a:labredes:wegia:*:*:*:*:*:*:*:*
Total vulnerabilities: 205
Public exploits: 12
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WeGIA WeGIA is affected by 205 known vulnerabilities: 47 high, 112 medium, 46 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136997 - Incorrect Authorization
CWE-863 Medium
No
No
3.9.1 07.07.2026 SB2026070749
#VU136996 - Improper Control of Filename for Include/Require Statement in PHP Program
CWE-98 Low
No
No
3.9.1 07.07.2026 SB2026070749
#VU136992 - Missing Authentication for Critical Function
CWE-306 High
No
No
3.8.6 07.07.2026 SB2026070747
#VU136987 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-55684
CWE-89 High
No
No
3.8.6 07.07.2026 SB2026070747
#VU136986 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-55683
CWE-89 High
No
No
3.8.6 07.07.2026 SB2026070747
#VU136985 - Session Fixation
CVE-2026-55682
CWE-384 High
No
No
3.8.6 07.07.2026 SB2026070747
#VU136984 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-55681
CWE-89 Medium
No
No
3.8.6 07.07.2026 SB2026070747
#VU136983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-55680
CWE-89 High
No
No
3.8.6 07.07.2026 SB2026070747
#VU136982 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-55679
CWE-78 High
No
No
3.8.6 07.07.2026 SB2026070747
#VU136978 - Missing Authorization
CWE-862 High
No
No
3.8.6 07.07.2026 SB2026070747
#VU136979 - Missing Authorization
CWE-862 High
No
No
3.8.6 07.07.2026 SB2026070747
#VU136980 - Missing Authorization
CWE-862 High
No
No
3.8.6 07.07.2026 SB2026070747
#VU136981 - Missing Authorization
CWE-862 High
No
No
3.8.6 07.07.2026 SB2026070747
#VU136977 - Use of Hard-coded Credentials
CVE-2026-54767
CWE-798 High
No
No
3.8.5 07.07.2026 SB2026070746
#VU136976 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-54670
CWE-22 High
No
No
3.8.5 07.07.2026 SB2026070746
#VU136975 - Authorization Bypass Through User-Controlled Key
CVE-2026-54671
CWE-639 Medium
No
No
3.8.5 07.07.2026 SB2026070746
#VU130933 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-45335
CWE-601 Low
No
No
3.7.3 11.05.2026 SB2026051157
#VU130934 - Information Exposure Through an Error Message
CWE-209 Low
No
No
3.7.3 11.05.2026 SB2026051157
#VU130449 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45026
CWE-79 Low
No
No
3.7.3 07.05.2026 SB2026050782
#VU130448 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45025
CWE-79 Low
No
No
3.7.3 07.05.2026 SB2026050782


Showing elements 1 - 20 out of 205