CVE ID :CVE-2026-55684 Published : Oct. 14, 2026, 8:17 p.m. | 1 hour, 15 minutes ago Description :WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobrancas_geracao.php endpoint accepts form-encoded POST data through...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-55684 - WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php

VERWANDTEARTIKEL

CVE-2026-71854 - OpenAEV has unauthenticated access and missing object-level authorization on player lessons API

CVE-2026-57489 - FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass

CVE-2026-57490 - FileRise: WebDAV authentication bypasses TOTP/MFA entirely

CVE-2026-61843 - FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares

CVE-2026-104108 - FileRise OIDC login can bind an attacker identity to an existing local account

CVE-2026-103977 - FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts