Authorization bypass through user-controlled key in WeGIA - CVE-2026-76634
Published: November 9, 2026 / Updated: November 10, 2026
Vulnerability identifier: #VU163003
CSH Severity: Low
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-76634
CWE-ID: CWE-639
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an authenticated attacker to read other employees' full profiles in WeGIA, exposing sensitive personal information without authorization.
The vulnerability exists due to request parameter extraction in html/funcionario/profile_funcionario.php overwriting the session-derived employee identifier when an id_pessoa query parameter is supplied. An authenticated attacker can submit requests with successive identifier values to enumerate employee profiles and retrieve personal data, including tax identifiers, addresses, and contact details.
Affected software
WeGIA
How to mitigate CVE-2026-76634
Install security update from vendor's website.
WeGIA - update to 3.9.2