Vulnerabilities

Report: CVE-2026-35475 - WeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect']

2026-04-06 0 views admin

CVE ID :CVE-2026-35475 Published : April 6, 2026, 9:17 p.m. | 13 minutes ago Description :WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, the redirect parameter is taken directly from $_GET with no URL validation or whitelist check, then used verbatim in a header(

CVE Details

CVE ID

CVE-2026-35475

Published

April 6, 2026

🏷️ Tags

report35475wegiaredirectbackupredirectionunvalidatedpublishedcvecve-2026-35475

InfinitSec - Latest Cybersecurity, Technology & Gaming News

Report: CVE-2026-35475 - WeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect']

CVE Details

🏷️ Tags

More from Vulnerabilities

Report: Ultimate Guide: CVE-2026-5684 - Tenda CX12L webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow

Report: Ultimate Guide: CVE-2026-34972 - OpenFGA's BatchCheck within-request deduplication produces incorrect authorizati...

Report: CVE-2025-54601 - Samsung Exynos Wi-Fi Driver Double Free Vulnerability - Expert Insights

Report: Breaking: CVE-2026-35391 - Bulwark Webmail getClientIP() trusted client-controlled X-Forwarded-For value, e...

Trending

CVE-2025-61481: Critical Remote Code Execution Vulnerability in MikroTik RouterOS & SwitchOS

CVE-2025-43939: Dell Unity OS Command Injection (High)

Google disputes false claims of massive Gmail data breach

Microsoft: DNS outage impacts Azure and Microsoft 365 services

3.5B Accounts, 1 Critical Flaw: Meta Closes WhatsApp Data-Harvesting