Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, the redirect parameter is taken directly from $_GET with no URL validation or whitelist check, then used verbatim in a header("Location: ...") call. This vulnerability is fixed in 3.6.9.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-06 | 2 | Disclosure2 |
| 2026-04-07 | 1 | Disclosure1 |
CVE-2026-35475 Open Redirect Vulnerability in WeGIA Web Manager Prior to Version 3.6.9 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35475
Post summary
A new open‑redirect vulnerability (CVE‑2026‑35475) affecting WeGIA Web Manager versions prior to 3.6.9 has been disclosed.
🚨*CVE* CVE-2026-35475 WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, the redirect parameter is taken directly from $_GET with no URL validation or whitelist check, the… https://www.cve.org/CVERecord?id=CVE-2026-35475 ----- Traducción: CVE-2026-35475 WeG… http://infoflow.cloud`
Post summary
A concise description of CVE-2026-35475, noting an unsanitized redirect parameter in WeGIA prior to version 3.6.9, with a link to the official CVE record.
CVE-2026-35475 WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, the redirect parameter is taken directly from $_GET with no URL validation or whitelist check, the… https://www.cve.org/CVERecord?id=CVE-2026-35475
Post summary
The CVE details an unvalidated redirect parameter in WeGIA’s Web manager, exposing an open redirect vulnerability, but no PoC, exploit code, patch, or active exploitation is mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wegia | wegia | - | - | - |