CVE-2026-76634
WeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.php
- State
- Published
- Severity
- 7.1 High
- Published
- Aug 20, 2026
- Updated
- Oct 1, 2026
- Reserved
- Aug 19, 2026
Description
WeGIA before 3.9.2 contains an insecure direct object reference vulnerability in the employee profile page that allows authenticated attackers to access arbitrary employee records by injecting an id_pessoa parameter through a request extraction function that overwrites the session-derived identifier. Attackers can enumerate all user identifiers to retrieve full profile data for any employee account, including name, CPF, address, contact details, and administrative flags.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.1 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-639 Authorization Bypass Through User-Controlled Key
Affected Products
| Product | Versions |
|---|---|
WeGIALabRedesCefetRJ |
|
References
- GitHub Security Advisory (GHSA-jqh5-66qr-85qv)vendor-advisory
- Release Notesrelease-notes
- https://www.vulncheck.com/advisories/wegia-insecure-direct-object-reference-via-profile-funcionario-phpthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.