CVE-2025-26609: SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIA
First published: Tue Feb 18 2025(Updated: )
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `familiar_docfamiliar.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wegia Wegia | <3.2.14 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2025-26609?
CVE-2025-26609 has been categorized with a high severity due to the potential for SQL injection attacks.
How do I fix CVE-2025-26609?
To fix CVE-2025-26609, update the WeGIA application to version 3.2.14 or later to mitigate the SQL injection vulnerability.
What systems are affected by CVE-2025-26609?
CVE-2025-26609 affects the WeGIA application versions prior to 3.2.14.
Can CVE-2025-26609 be exploited remotely?
Yes, CVE-2025-26609 can be exploited remotely by sending specially crafted requests to the vulnerable endpoint.
What is WeGIA and its potential risks related to CVE-2025-26609?
WeGIA is a web management application that, if exploited through CVE-2025-26609, could allow attackers to execute arbitrary SQL queries on the database.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/severity
- agent/author
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/wegia
- canonical/wegia wegia