Known vulnerabilities in WeGIA 3.8.6

Vendor: LabReDeS
Software: WeGIA
Version: 3.8.6
Software CPE: cpe:2.3:a:labredes:wegia:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting WeGIA version 3.8.6 WeGIA 3.8.6 is affected by 9 vulnerabilities: 3 high, 3 medium, 3 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136997 - Incorrect Authorization
CWE-863 Medium
No
No
3.9.1 07.07.2026 SB2026070749
#VU136996 - Improper Control of Filename for Include/Require Statement in PHP Program
CWE-98 Low
No
No
3.9.1 07.07.2026 SB2026070749
#VU136995 - Missing Authorization
CWE-862 High
No
No
3.8.7 07.07.2026 SB2026070748
#VU136994 - Missing Authorization
CWE-862 High
No
No
3.8.7 07.07.2026 SB2026070748
#VU136993 - Missing Authorization
CWE-862 High
No
No
3.8.7 07.07.2026 SB2026070748
#VU136991 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
3.8.7 07.07.2026 SB2026070748
#VU136989 - Authorization Bypass Through User-Controlled Key
CWE-639 Medium
No
No
3.8.7 07.07.2026 SB2026070748
#VU136990 - Cross-Site Request Forgery (CSRF)
CWE-352 Medium
No
No
3.8.7 07.07.2026 SB2026070748
#VU136988 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
3.8.7 07.07.2026 SB2026070748