CVE-2026-23723 - WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memoran...

CVE ID : CVE-2026-23723 Published : Jan. 16, 2026, 7:27 p.m. | 50 minutes ago Description : WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an authenticated SQL Injection vulnerability was identified in the Atendido_ocorrenciaControle endpoint via the id_memorando parameter. This flaw allows for full database exfiltration, exposure of sensitive PII, and potential arbitrary file reads in misconfigured environments. This vulnerability is fixed in 3.6.2. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...