PT-2026-39725 · Wegia · Wegia

Arthurvel · Published 2026-05-11 · Updated 2026-05-11 · CVE-2026-42871

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.7.0

Description The software displays overly descriptive error messages containing database-related details through the 'atendido/familiar docfamiliar.php' endpoint. This information disclosure can be used to map the backend infrastructure and expand the attack surface.

Recommendations Update to version 3.7.0.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-42871

GHSA-XPVM-3F74-QVP2

Affected Products

Wegia

References · 4

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42871.json · Exploit
• 🔥 https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-xpvm-3f74-qvp2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-42871 · Security Note
• https://osv.dev/vulnerability/CVE-2026-42871 · Vendor Advisory