VulnSocial

CVE-2026-31894Disclosure(wegia / wegia)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch wegia wegia systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

WeGIA is a web manager for charitable institutions. In 3.6.5, The patched loadBackupDB() extracts tar.gz archives to a temporary directory using PHP's PharData class, then uses glob() and file_get_contents() to read SQL files from the extracted contents. Neither the extraction nor the file reading validates whether archive members are symbolic links. This vulnerability is fixed in 3.6.6.

wegia CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Weakness type (CWE)
CWE-59

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • wegia

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
wegia
Products
wegia

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-03-11: 2Patch / Workaround · 2026-03-11: 1Technical Details · 2026-03-11: 203-11
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-31894 WeGIA is a web manager for charitable institutions. In 3.6.5, The patched loadBackupDB() extracts tar.gz archives to a temporary directory using PHP's PharData class,… https://www.cve.org/CVERecord?id=CVE-2026-31894 ----- Traducción: CVE-2026-31894 WeG… http://infoflow.cloud`

    Post summary

    The text reports CVE-2026-31894, describing a flaw in WeGIA’s loadBackupDB() that improperly extracts tar.gz archives using PHP’s PharData class. No PoC, exploit, or active exploitation is mentioned, and patch details are not explicitly provided.

    0000024
    57 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-31894 WeGIA is a web manager for charitable institutions. In 3.6.5, The patched loadBackupDB() extracts tar.gz archives to a temporary directory using PHP's PharData class,… https://www.cve.org/CVERecord?id=CVE-2026-31894

    Post summary

    The post references CVE-2026-31894 in WeGIA 3.6.5, notes that the patched loadBackupDB function processes tar.gz archives using PHP's PharData class, and provides a link to the CVE record.

    00000230
    56.6K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appwegiawegia3.6.5--

Explore more

Back to dashboardwegia CVEswegia vulnerabilities