CVE ID :CVE-2026-55680 Published : Oct. 14, 2026, 8:17 p.m. | 1 hour, 15 minutes ago Description :WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastro_cobranca.php can place a quoted SQL expression in the codigo...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-55680 - WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter

VERWANDTEARTIKEL

CVE-2026-71854 - OpenAEV has unauthenticated access and missing object-level authorization on player lessons API

CVE-2026-57489 - FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass

CVE-2026-57490 - FileRise: WebDAV authentication bypasses TOTP/MFA entirely

CVE-2026-61843 - FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares

CVE-2026-104108 - FileRise OIDC login can bind an attacker identity to an existing local account

CVE-2026-103977 - FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts