CVE-2026-55682

The WeGIA web manager for charitable institutions is vulnerable to session fixation and information disclosure in versions prior to 3.8.6 . The root cause is located in the auto-prepended web/html/seguranca/sessionStart.php file, which reflects an attacker-supplied PHPSESSID cookie in a Set-Cooki...