Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos & listarId_Nome and nomeClasse=OrigemControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external websites. This can be abused for phishing attacks, credential theft, malware distribution, and social engineering using the trusted WeGIA domain. This vulnerability is fixed in 3.6.9.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-06 | 2 | Disclosure2 |
| 2026-04-07 | 1 | Disclosure1 |
CVE-2026-35398 Open Redirect Vulnerability in WeGIA Web Manager Prior to Version 3.6.9 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35398
Post summary
A new open‑redirect vulnerability (CVE‑2026‑35398) in WeGIA Web Manager versions prior to 3.6.9 has been disclosed, with technical details cited but no PoC, exploit, or patch information provided.
🚨*CVE* CVE-2026-35398 WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the W… https://www.cve.org/CVERecord?id=CVE-2026-35398 ----- Traducción: CVE-2026-35398 WeG… http://infoflow.cloud`
Post summary
The post announces CVE-2026-35398, an Open Redirect flaw in WeGIA’s control.php endpoint before version 3.6.9; no PoC, exploit code, active usage, or patch information is provided.
CVE-2026-35398 WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the W… https://www.cve.org/CVERecord?id=CVE-2026-35398
Post summary
The tweet reports that CVE-2026-35398 is an Open Redirect flaw in WeGIA’s control endpoint, but provides no PoC, exploit code, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wegia | wegia | - | - | - |