L
Vendor security profile
LabRedesCefetRJ
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical5
CISA KEV0
Public exploit4
Patch rate%0
Avg. CVSS8.7
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
3
6
CVE KEV
CVE severity distribution
11toplam CVE
Critical5 (45%)
High5 (45%)
Medium1 (9%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%36
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
11Unknown
Latest vulnerabilities
9.8
CVE-2026-55684
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php
L
Patch status unknown
8.1
CVE-2026-55682
WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.php
L
Patch status unknown
8.8
CVE-2026-55681
WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter
L
Patch status unknown
6.5
CVE-2026-55679
WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection
L
Patch status unknown
9.8
CVE-2026-55680
WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter
L
Patch status unknown
9.8
CVE-2026-55683
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php
L
Patch status unknown
9.1
CVE-2026-54767
WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php
L
Patch status unknownEPSS %1
8.8
CVE-2026-54671
WeGIA: Authorization Bypass via Empty Resource Array in InternoControle
L
Patch status unknownEPSS %1
9.1
CVE-2026-54670
WeGIA: Unauthenticated Auth Bypass + Local File Inclusion
L
Patch status unknownEPSS %1
7.1
CVE-2026-76634
WeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.php
L
Patch status unknownEPSS %0