CVE ID :CVE-2026-55682 Published : Oct. 14, 2026, 8:17 p.m. | 1 hour, 15 minutes ago Description :WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the auto-prepended web/html/seguranca/sessionStart.php reflects an attacker-supplied PHPSESSID cookie in a Set-Cookie response...

#Sicherheitslücke #Databreach #Update

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-55682 - WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.php

VERWANDTEARTIKEL

CVE-2026-71854 - OpenAEV has unauthenticated access and missing object-level authorization on player lessons API

CVE-2026-57489 - FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass

CVE-2026-57490 - FileRise: WebDAV authentication bypasses TOTP/MFA entirely

CVE-2026-61843 - FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares

CVE-2026-104108 - FileRise OIDC login can bind an attacker identity to an existing local account

CVE-2026-103977 - FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts