CVE-2026-40285 - WeGIA has SQL Injection via Session Variable Override in DespachoControle.php
CVE ID :CVE-2026-40285 Published : April 17, 2026, 9:16 p.m. | 1 hour, 24 minutes ago Description :WeGIA is a web manager for charitable institutions. Versions prior to 3.6.10 contain a SQL injection vulnerability in dao/memorando/UsuarioDAO.php. The cpf_usuario POST parameter overwrites the s
ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD
Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.
GET THE SUNDAY BRIEFING →RELATED · cyber
- [CYBER] Hackers steal nearly $300M in biggest DeFi exploit of 2026 - Seeking Alpha
- [CYBER] Hackers steal nearly $300M in biggest DeFi exploit of 2026
- [CYBER] 'DeFi is dead': crypto community scrambles after this year's biggest hack exposes contagion risks
- [CYBER] Vercel confirms breach as hackers claim to be selling stolen data
- [CYBER] I found a critical CVE in a top AI agent framework. Here's what it taught me about how we're all building agents wrong.
- [CYBER] Why Your Lab Domain Suddenly Stopped Resolving (DNS Blocklists)