Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=EstoqueControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external websites. This can be abused for phishing attacks, credential theft, malware distribution, and social engineering using the trusted WeGIA domain. This vulnerability is fixed in 3.6.9.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-06 | 2 | Disclosure2 |
| 2026-04-07 | 1 | Disclosure1 |
CVE-2026-35472 Open Redirect Vulnerability in WeGIA Web Manager Prior to Version 3.6.9 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35472
Post summary
The post announces an open redirect flaw (CVE‑2026‑35472) that affects WeGIA Web Manager versions earlier than 3.6.9, but it contains no PoC, exploit, or patch details.
🚨*CVE* CVE-2026-35472 WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the W… https://www.cve.org/CVERecord?id=CVE-2026-35472 ----- Traducción: CVE-2026-35472 WeG… http://infoflow.cloud`
Post summary
The snippet announces the discovery of an Open Redirect in the WeGIA web manager (CVE‑2026‑35472), providing basic technical details and linking to the formal CVE record, but it does not include PoC, exploitation evidence, or patch information.
CVE-2026-35472 WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the W… https://www.cve.org/CVERecord?id=CVE-2026-35472
Post summary
The note announces CVE-2026-35472, an Open Redirect flaw in WeGIA prior to version 3.6.9, with no PoC, exploit, or active exploitation indicated.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wegia | wegia | - | - | - |