How many CVEs have patched listarTodos?

14 published CVEs changed listarTodos in LabRedesCefetRJ/WeGIA, in 8 distinct patches totalling 2,466 changed lines, between 2025 and 2026.

What is the latest CVE that changed listarTodos?

CVE-2026-54767 (WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php), published 2026-09-17, changed lines 81 of web/controle/InternoControle.php.

How does listarTodos compare to the rest of LabRedesCefetRJ/WeGIA?

LabRedesCefetRJ/WeGIA has 82 CVEs with a located fix in total; 14 of them changed listarTodos.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

listarTodos in LabRedesCefetRJ/WeGIA: Patched by 14 CVEs

WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php

CVE-2026-54767 · web/controle/InternoControle.php · line 81 · +0 −58

Critical · CVSS 9.1

EPSS 0.8%2026-09-17

WeGIA: Authorization Bypass via Empty Resource Array in InternoControle

CVE-2026-54671 · web/controle/InternoControle.php · line 81 · +0 −116 in 2 hunks

High · CVSS 8.8

EPSS 0.6%2026-09-17

WeGIA Clickjacking Vulnerability

CVE-2026-23731 · controle/Atendido_ocorrenciaControle.php · line 22 · +1 −1

Medium · CVSS 4.3

EPSS 0.3%2026-01-16

WeGIA Clickjacking Vulnerability

CVE-2026-23731 · controle/ProdutoControle.php · lines 54–128 · +47 −27

Medium · CVSS 4.3

EPSS 0.3%2026-01-16

WeGIA Clickjacking Vulnerability

CVE-2026-23731 · dao/ProdutoDAO.php · lines 64–193 · +76 −98

Medium · CVSS 4.3

EPSS 0.3%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)

CVE-2026-23730 · controle/Atendido_ocorrenciaControle.php · line 22 · +1 −1

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)

CVE-2026-23730 · controle/ProdutoControle.php · lines 54–128 · +47 −27

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)

CVE-2026-23730 · dao/ProdutoDAO.php · lines 64–193 · +76 −98

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)

CVE-2026-23729 · controle/Atendido_ocorrenciaControle.php · line 22 · +1 −1

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)

CVE-2026-23729 · controle/ProdutoControle.php · lines 54–128 · +47 −27

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)

CVE-2026-23729 · dao/ProdutoDAO.php · lines 64–193 · +76 −98

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)

CVE-2026-23728 · controle/Atendido_ocorrenciaControle.php · line 22 · +1 −1

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)

CVE-2026-23728 · controle/ProdutoControle.php · lines 54–128 · +47 −27

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)

CVE-2026-23728 · dao/ProdutoDAO.php · lines 64–193 · +76 −98

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)

CVE-2026-23727 · controle/Atendido_ocorrenciaControle.php · line 22 · +1 −1

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)

CVE-2026-23727 · controle/ProdutoControle.php · lines 54–128 · +47 −27

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)

CVE-2026-23727 · dao/ProdutoDAO.php · lines 64–193 · +76 −98

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)

CVE-2026-23726 · controle/Atendido_ocorrenciaControle.php · line 22 · +1 −1

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)

CVE-2026-23726 · controle/ProdutoControle.php · lines 54–128 · +47 −27

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)

CVE-2026-23726 · dao/ProdutoDAO.php · lines 64–193 · +76 −98

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page

CVE-2026-23725 · controle/Atendido_ocorrenciaControle.php · line 22 · +1 −1

Medium · CVSS 5.3

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page

CVE-2026-23725 · controle/ProdutoControle.php · lines 54–128 · +47 −27

Medium · CVSS 5.3

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page

CVE-2026-23725 · dao/ProdutoDAO.php · lines 64–193 · +76 −98

Medium · CVSS 5.3

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page

CVE-2026-23724 · controle/Atendido_ocorrenciaControle.php · line 22 · +1 −1

Medium · CVSS 5.4

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page

CVE-2026-23724 · controle/ProdutoControle.php · lines 54–128 · +47 −27

Medium · CVSS 5.4

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page

CVE-2026-23724 · dao/ProdutoDAO.php · lines 64–193 · +76 −98

Medium · CVSS 5.4

EPSS 0.2%2026-01-16

WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter

CVE-2026-23723 · controle/Atendido_ocorrenciaControle.php · line 22 · +1 −1

High · CVSS 7.2

EPSS 0.4%2026-01-16

WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter

CVE-2026-23723 · controle/ProdutoControle.php · lines 54–128 · +47 −27

High · CVSS 7.2

EPSS 0.4%2026-01-16

WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter

CVE-2026-23723 · dao/ProdutoDAO.php · lines 64–193 · +76 −98

High · CVSS 7.2

EPSS 0.4%2026-01-16

WeGIA SQL Injection via 'cpf' param at endpoint `/html/funcionario/cadastro_funcionario_pessoa_existente.php`

CVE-2025-62179 · dao/FuncionarioDAO.php · lines 521–525 · +3 −3

High · CVSS 8.6

EPSS 0.4%2025-10-13

WeGIA: Cross-Site Request Forgery (CSRF) Vulnerability in `control.php` Endpoint

CVE-2025-61604 · controle/AlmoxarifadoControle.php · line 24 · +1 −1

High · CVSS 7.1

EPSS 0.2%2025-10-02

WeGIA allows Stored XSS attacks in novo_memorando.php

CVE-2025-53526 · dao/memorando/MemorandoDAO.php · lines 25–70 · +13 −21 in 2 hunks

Low · CVSS 2.0

EPSS 0.3%2025-07-07

listarTodos

Overview

CVEs that patched it

Other functions in these files

Other hotspots in the repository

Frequently asked questions

References

Track LabRedesCefetRJ/WeGIA CVEs