WeGIA is a web manager for charitable institutions.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 27, 2026 · NIST NVD

   Detected

   WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, an unsafe use of the function on the superglobal allows an unauthenticated attacker to overwrite local variables in multiple PHP scripts. This vulnerability can be leveraged to completely bypass authentication checks, allowing unauthorized access to administrative and protected areas of the WeGIA application. Version 3.6.5

2. Jun 17, 2026 · NIST NVD

   Updated

   WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, an unsafe use of the function on the superglobal allows an unauthenticated attacker to overwrite local variables in multiple PHP scripts. This vulnerability can be leveraged to completely bypass authentication checks, allowing unauthorized access to administrative and protected areas of the WeGIA application. Version 3.6.5

Affected

• cpe wegia/wegiaversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-28411

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-28411

  WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, an unsafe use of the function on the superglobal allows an unauthenticated attacker to overwrite local variables in multiple PHP scripts. This vulnerability can be leveraged to com

  nvd.nist.gov

References

• Exploit · github.com