CVE-2026-61671 - WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classes
CVE ID :CVE-2026-61671 Published : Oct. 29, 2026, 9:21 p.m. | 39 minutes ago Description :WeGIA is a web manager for charitable institutions. Prior to the advisory's stated patched version 3.8.7, the `/controle/control.php` dispatch endpoint accepts attacker-controlled `nomeClasse`, `metodo`,...