PT-2026-44043 · Wegia · Wegia

Dv3920 · CVE-2026-45335 · Published 2026-05-27 · Updated 2026-05-27

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.7.3

Description An Open Redirect issue exists in the '/WeGIA/controle/control.php' endpoint. The application fails to validate or restrict the nextPage parameter when used in conjunction with metodo=listarTodos and nomeClasse=InternoControle, allowing users to be redirected to arbitrary external websites. This can be leveraged for phishing, credential theft, malware distribution, and social engineering by exploiting the trust associated with the domain.

Recommendations Update to version 3.7.3. As a temporary mitigation, restrict the use of the nextPage parameter in the '/WeGIA/controle/control.php' endpoint.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2026-45335

GHSA-X85F-76C9-QW3X

Affected Products

Wegia

References · 4

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45335.json · Exploit
• 🔥 https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-x85f-76c9-qw3x · Exploit
• https://osv.dev/vulnerability/CVE-2026-45335 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45335 · Security Note