Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarId and nomeClasse=IsaidaControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external websites. This can be abused for phishing attacks, credential theft, malware distribution, and social engineering using the trusted WeGIA domain. This vulnerability is fixed in 3.6.9.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-06 | 2 | Disclosure2 |
| 2026-04-07 | 1 | Disclosure1 |
CVE-2026-35396 Open Redirect Vulnerability in WeGIA Web Manager Prior to Version 3.6.9 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35396
Post summary
CVE‑2026‑35396 is an open‑redirect flaw in WeGIA Web Manager prior to version 3.6.9, with no PoC, exploit, active attack, or patch information disclosed.
🚨*CVE* CVE-2026-35396 WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the W… https://www.cve.org/CVERecord?id=CVE-2026-35396 ----- Traducción: CVE-2026-35396 WeG… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑35396, outlining an Open Redirect flaw in WeGIA before 3.6.9, but does not provide PoC code, exploitation tools, active use evidence, or mitigation steps.
CVE-2026-35396 WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the W… https://www.cve.org/CVERecord?id=CVE-2026-35396
Post summary
CVE-2026-35396 is a disclosed Open Redirect flaw in WeGIA's control.php endpoint, impacting versions earlier than 3.6.9.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wegia | wegia | - | - | - |