CVE-2026-55681 WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, an authenticated user with access to the Material & Patrimônio module can submit idproduto to web/html/matPat/restaurarprodutodesocultar.php, where a second extract$REQUEST overwrites the value previously sanitized by intval. The...