CVE-2025-26608: SQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIA
First published: Tue Feb 18 2025(Updated: )
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `dependente_docdependente.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wegia Wegia | <3.2.13 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2025-26608?
CVE-2025-26608 is considered a high-severity vulnerability due to its potential for arbitrary SQL code execution.
How do I fix CVE-2025-26608?
To fix CVE-2025-26608, update WeGIA to version 3.2.14 or later, which includes a patch for the SQL injection vulnerability.
What is the affected version of WeGIA for CVE-2025-26608?
The affected version of WeGIA for CVE-2025-26608 is up to version 3.2.13, inclusive.
What type of vulnerability is CVE-2025-26608?
CVE-2025-26608 is a SQL Injection vulnerability found in the `dependente_docdependente.php` endpoint of the WeGIA application.
Who is affected by CVE-2025-26608?
WeGIA users, particularly those using versions up to 3.2.13, are affected by CVE-2025-26608 if they have not applied the security update.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/severity
- agent/author
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/wegia
- canonical/wegia wegia