Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, WeGIA (Web gerenciador para instituições assistenciais) contains a SQL injection vulnerability in dao/memorando/DespachoDAO.php. The id_memorando parameter is extracted from $_REQUEST without validation and directly interpolated into SQL queries, allowing any authenticated user to execute arbitrary SQL commands against the database. This vulnerability is fixed in 3.6.9.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-35395 WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, WeGIA (Web gerenciador para instituições assistenciais) contains a SQL injection vulnerability in … https://www.cve.org/CVERecord?id=CVE-2026-35395
Post summary
The text reveals that CVE-2026-35395 is a SQL injection vulnerability present in WeGIA versions before 3.6.9, but it offers no further exploitation or mitigation details.
🚨*CVE* CVE-2026-35395 WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, WeGIA (Web gerenciador para instituições assistenciais) contains a SQL injection vulnerability in … https://www.cve.org/CVERecord?id=CVE-2026-35395 ----- Traducción: CVE-2026-35395 WeG… http://infoflow.cloud`
Post summary
The post discloses CVE-2026-35395 as a SQL injection in the WeGIA web manager prior to version 3.6.9, and provides a link to the official CVE record.
[CVE-2026-35395: HIGH] Web manager WeGIA had a SQL injection vulnerability prior to version 3.6.9 in DespachoDAO.php. It allowed authenticated users to run SQL commands but was fixed in 3.6.9.#cve,CVE-2026-35395,#cybersecurity https://cvefind.com/CVE-2026-35395
Post summary
CVE‑2026‑35395 is a SQL injection flaw in Web manager WeGIA that enabled authenticated users to execute arbitrary SQL statements; it has been resolved in version 3.6.9.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wegia | wegia | - | - | - |