Known vulnerabilities in WeGIA - page 2

Vendor: LabReDeS
Software: WeGIA
Software CPE: cpe:2.3:a:labredes:wegia:*:*:*:*:*:*:*:*
Total vulnerabilities: 205
Public exploits: 12
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WeGIA WeGIA is affected by 205 known vulnerabilities: 47 high, 112 medium, 46 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136977 - Use of Hard-coded Credentials
CVE-2026-54767
CWE-798 High
No
No
3.8.5 07.07.2026 SB2026070746
#VU136976 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-54670
CWE-22 High
No
No
3.8.5 07.07.2026 SB2026070746
#VU136975 - Authorization Bypass Through User-Controlled Key
CVE-2026-54671
CWE-639 Medium
No
No
3.8.5 07.07.2026 SB2026070746
#VU130933 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-45335
CWE-601 Low
No
No
3.7.3 11.05.2026 SB2026051157
#VU130934 - Information Exposure Through an Error Message
CWE-209 Low
No
No
3.7.3 11.05.2026 SB2026051157
#VU130450 - Use of a One-Way Hash without a Salt
CVE-2026-45027
CWE-759 Medium
No
No
3.7.3 07.05.2026 SB2026050782
#VU130449 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45026
CWE-79 Low
No
No
3.7.3 07.05.2026 SB2026050782
#VU130448 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45025
CWE-79 Low
No
No
3.7.3 07.05.2026 SB2026050782
#VU129038 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53824
CWE-79 Medium
No
No
3.4.4 02.05.2026 SB2026043098
#VU129029 - Resource exhaustion
CVE-2025-53531
CWE-400 Medium
No
No
3.3.0 02.05.2026 SB20260502156
#VU129028 - Resource exhaustion
CVE-2025-53530
CWE-400 Medium
No
No
3.3.0 02.05.2026 SB20260502156
#VU128704 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
3.4.4 30.04.2026 SB2026043098
#VU128703 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-46828
CWE-89 High
No
No
3.3.1 30.04.2026 SB2026043097
#VU128702 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-53091
CWE-89 High
No
No
3.4.0 30.04.2026 SB2026043096
#VU128701 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-53527
CWE-89 Low
No
No
3.4.1 30.04.2026 SB2026043095
#VU128700 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-52474
CWE-89 Low
No
No
3.4.2 30.04.2026 SB2026043094
#VU128699 - Command injection
CVE-2025-50201
CWE-77 High
No
No
3.4.2 30.04.2026 SB2026043094
#VU128694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53526
CWE-79 Medium
No
No
3.4.3 30.04.2026 SB2026043093
#VU128692 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53525
CWE-79 Medium
No
No
3.4.3 30.04.2026 SB2026043093
#VU128691 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-53377
CWE-79 Medium
No
No
3.4.3 30.04.2026 SB2026043093


Showing elements 21 - 40 out of 205