CVE-2025-26614: SQL Injection endpoint 'deletar_documento.php' parameter 'id_cargo' in WeGIA
First published: Tue Feb 18 2025(Updated: )
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `deletar_documento.php` endpoint. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wegia Wegia | <3.2.14 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2025-26614?
CVE-2025-26614 is considered a high severity vulnerability due to its potential for SQL Injection attacks.
How do I fix CVE-2025-26614?
To fix CVE-2025-26614, it is recommended to update WeGIA to version 3.2.14 or higher and sanitize all user inputs.
What is the impact of exploiting CVE-2025-26614?
Exploiting CVE-2025-26614 allows an authorized attacker to execute arbitrary SQL queries on the WeGIA application.
Who is affected by CVE-2025-26614?
CVE-2025-26614 affects users of WeGIA versions prior to 3.2.14.
Is CVE-2025-26614 being actively exploited?
While there is no current confirmation of active exploitation, it is crucial to address CVE-2025-26614 promptly to mitigate risk.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/severity
- agent/author
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/wegia
- canonical/wegia wegia