CVE-2026-42871: WeGIA: Error Handling familiar_docfamiliar
WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, atendido/familiardocfamiliar.php displays an overly descriptive error message, including database-related details. This verbosity leads to information disclosure, which could assist a potential attacker in mapping the backend infrastructure and expanding the attack surface. This vulnerability is fixed in 3.7.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-42871?
CVE-2026-42871 has a medium severity rating due to its information disclosure risk.
How do I fix CVE-2026-42871?
To fix CVE-2026-42871, upgrade WeGIA to version 3.7.0 or later.
What type of vulnerability is CVE-2026-42871?
CVE-2026-42871 is classified as an information disclosure vulnerability.
In which software versions does CVE-2026-42871 exist?
CVE-2026-42871 affects WeGIA versions prior to 3.7.0.
What can an attacker gain from exploiting CVE-2026-42871?
An attacker exploiting CVE-2026-42871 could gain sensitive database-related information.