CVE-2026-23728

creationtimestamp| type| source ---|---|--- 2026-01-16 23:21:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclagsquio2x...

CVE-2026-23728 WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=DestinoControle...