Wegia

This hub aggregates every CVE we track for Wegia, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Wegia.

• CVE-2026-45335WeGIA: Middleware whitelist bypass → open redirect via InternoControle.nextPage5.4May 27, 2026
• CVE-2026-45027WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php5.9May 27, 2026
• CVE-2026-45026WeGIA: Stored XSS in html/atendido/processo_aceitacao.php6.8May 11, 2026
• CVE-2026-45025WeGIA: Stored XSS in html/atendido/etapa_processo.php6.8May 11, 2026
• CVE-2026-42872WeGIA: Reflected XSS in listar_arquivos_etapa.php6.1May 11, 2026
• CVE-2026-40286WeGIA has Cross-Site Scripting in Controle de Contribuição7.5Apr 17, 2026
• CVE-2026-40285WeGIA has SQL Injection via Session Variable Override in DespachoControle.php8.8Apr 17, 2026
• CVE-2026-40284WeGIA has stored XSS in listar_despachos.php6.8Apr 17, 2026
• CVE-2026-40283WeGIA has stored XSS in profile_paciente.php6.8Apr 17, 2026
• CVE-2026-35475WeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect']6.1Apr 6, 2026
• CVE-2026-35474WeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect']6.1Apr 6, 2026
• CVE-2026-35473WeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage']6.1Apr 6, 2026
• CVE-2026-35399WeGIA has Stored XSS in backup file names6.1Apr 6, 2026
• CVE-2026-35472WeGIA - Open Redirect - EstoqueControle - listarTodos() - Unvalidated $_GET['nextPage']6.1Apr 6, 2026
• CVE-2026-35398WeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage']6.1Apr 6, 2026