Medium severity · published Jan 16, 2026
CVE-2026-23728
WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)
6.1
CVSS
0.2%
EPSS
No
On KEV
Description
WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=DestinoControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external websites. This can be abused for phishing attacks, credential theft, malware distribution, and social engineering using the trusted WeGIA domain. This vulnerability is fixed in 3.6.2.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
WeGIA · LabRedesCefetRJ
< 3.6.2 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-23728
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-23728
Issue Tracking
https://github.com/LabRedesCefetRJ/WeGIA/pull/1333
Release Notes
https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.6.2
Exploit
https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-jf25-p56f-wpgh
More from WeGIA
9.8
CVE-2026-55684
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php
9.8
CVE-2026-55680
WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter
9.8
CVE-2026-55683
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php
9.8
CVE-2026-31896
WeGIA has a Time-Based Blind SQL Injection in remover_produto_ocultar.php
9.8
CVE-2026-28411
WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`