PT-2026-39737 · Wegia · Wegia

Arthurvel · CVE-2026-42873 · Published 2026-05-11 · Updated 2026-05-11

Positive Technologies (AI Summary)

CVSS v3.1

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.6.10

Description An information disclosure issue exists when uploading files with malicious content to the 'funcionario/docdependente upload.php' endpoint. The application returns overly descriptive error messages, providing technical insights that can be used to refine attacks.

Recommendations Update to version 3.6.10.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-42873

GHSA-MWC9-45H6-PW24

Affected Products

Wegia

References · 4

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42873.json · Exploit
• 🔥 https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-mwc9-45h6-pw24 · Exploit
• https://osv.dev/vulnerability/CVE-2026-42873 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-42873 · Security Note