CVE-2026-45335

WeGIA is a web manager for charitable institutions. Prior to 3.7.3, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=InternoControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external websites. This can be abused for phishing attacks, credential theft, malware distribution, and social engineering using the trusted WeGIA domain. This vulnerability is fixed in 3.7.3.

• CWE-601

• https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-x85f-76c9-qw3x
• https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-x85f-76c9-qw3x

Published

May 27, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45329ESF-IDF is the Espressif Internet of Things (IOT) Developmen…6.5
• CVE-2026-4533A vulnerability was detected in code-projects Simple Food Or…8.8
• CVE-2026-45330Decidim is a participatory democracy framework. Prior to 0.3…4.9
• CVE-2026-45331Open WebUI is a self-hosted artificial intelligence platform…8.5
• CVE-2026-45332Automad is a flat-file content management system and templat…7.5
• CVE-2026-45334Kirby is an open-source content management system. In versio…5.3
• CVE-2026-45336HireFlow is a web-based interview management system for mana…10
• CVE-2026-45337Better Auth is an authentication and authorization library f…7.6
• CVE-2026-45338Open WebUI is a self-hosted artificial intelligence platform…7.7
• CVE-2026-45339Open WebUI is a self-hosted artificial intelligence platform…6.5
• CVE-2026-4534A flaw has been found in Tenda FH451 1.0.0.9. This affects t…8.8
• CVE-2026-45342LinkAce is a self-hosted archive to collect website links. P…7.1