CVE-2026-42871

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, atendido/familiar_docfamiliar.php displays an overly descriptive error message, including database-related details. This verbosity leads to information disclosure, which could assist a potential attacker in mapping the backend infrastructure and expanding the attack surface. This vulnerability is fixed in 3.7.0.

• CWE-200

• https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-xpvm-3f74-qvp2
• https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-xpvm-3f74-qvp2

Published

May 11, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-42865Inbox Zero is an AI personal assistant for email. Prior to 2…4.3
• CVE-2026-42866Tookie is a advanced OSINT information gathering tool. Prior…6.7
• CVE-2026-42867Langflow is a tool for building and deploying AI-powered age…6.5
• CVE-2026-42869SOCFortress CoPilot focuses on providing a single pane of gl…10
• CVE-2026-4287A security flaw has been discovered in Tiandy Easy7 Integrat…7.3
• CVE-2026-42870WeGIA is a web manager for charitable institutions. In versi…6.4
• CVE-2026-42872WeGIA is a web manager for charitable institutions. In versi…6.1
• CVE-2026-42873WeGIA is a web manager for charitable institutions. In versi…0
• CVE-2026-42874Microdot is a minimalistic Python web framework. Prior to 2.…3.7
• CVE-2026-42875External Secrets Operator reads information from a third-par…5.3
• CVE-2026-42876External Secrets Operator reads information from a third-par…4.9
• CVE-2026-42877FacturaScripts is an open source accounting and invoicing so…5.4