How many CVEs have patched verificar?

11 published CVEs changed verificar in LabRedesCefetRJ/WeGIA, in 5 distinct patches totalling 2,490 changed lines, between 2026 and 2026.

What is the latest CVE that changed verificar?

CVE-2026-54767 (WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php), published 2026-09-17, changed lines 35 to 36 of web/controle/InternoControle.php.

How does verificar compare to the rest of LabRedesCefetRJ/WeGIA?

LabRedesCefetRJ/WeGIA has 82 CVEs with a located fix in total; 11 of them changed verificar.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

verificar in LabRedesCefetRJ/WeGIA: Patched by 11 CVEs

WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php

CVE-2026-54767 · web/controle/InternoControle.php · lines 35–36 · +2 −0

Critical · CVSS 9.1

EPSS 0.8%2026-09-17

WeGIA: Authorization Bypass via Empty Resource Array in InternoControle

CVE-2026-54671 · web/controle/InternoControle.php · lines 35–36 · +4 −0 in 2 hunks

High · CVSS 8.8

EPSS 0.6%2026-09-17

WeGIA Clickjacking Vulnerability

CVE-2026-23731 · controle/DestinoControle.php · lines 2–88 · +64 −39

Medium · CVSS 4.3

EPSS 0.3%2026-01-16

WeGIA Clickjacking Vulnerability

CVE-2026-23731 · controle/TipoEntradaControle.php · lines 2–72 · +48 −29

Medium · CVSS 4.3

EPSS 0.3%2026-01-16

WeGIA Clickjacking Vulnerability

CVE-2026-23731 · controle/TipoSaidaControle.php · lines 2–79 · +61 −35

Medium · CVSS 4.3

EPSS 0.3%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)

CVE-2026-23730 · controle/DestinoControle.php · lines 2–88 · +64 −39

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)

CVE-2026-23730 · controle/TipoEntradaControle.php · lines 2–72 · +48 −29

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)

CVE-2026-23730 · controle/TipoSaidaControle.php · lines 2–79 · +61 −35

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)

CVE-2026-23729 · controle/DestinoControle.php · lines 2–88 · +64 −39

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)

CVE-2026-23729 · controle/TipoEntradaControle.php · lines 2–72 · +48 −29

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)

CVE-2026-23729 · controle/TipoSaidaControle.php · lines 2–79 · +61 −35

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)

CVE-2026-23728 · controle/DestinoControle.php · lines 2–88 · +64 −39

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)

CVE-2026-23728 · controle/TipoEntradaControle.php · lines 2–72 · +48 −29

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)

CVE-2026-23728 · controle/TipoSaidaControle.php · lines 2–79 · +61 −35

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)

CVE-2026-23727 · controle/DestinoControle.php · lines 2–88 · +64 −39

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)

CVE-2026-23727 · controle/TipoEntradaControle.php · lines 2–72 · +48 −29

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)

CVE-2026-23727 · controle/TipoSaidaControle.php · lines 2–79 · +61 −35

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)

CVE-2026-23726 · controle/DestinoControle.php · lines 2–88 · +64 −39

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)

CVE-2026-23726 · controle/TipoEntradaControle.php · lines 2–72 · +48 −29

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)

CVE-2026-23726 · controle/TipoSaidaControle.php · lines 2–79 · +61 −35

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page

CVE-2026-23725 · controle/DestinoControle.php · lines 2–88 · +64 −39

Medium · CVSS 5.3

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page

CVE-2026-23725 · controle/TipoEntradaControle.php · lines 2–72 · +48 −29

Medium · CVSS 5.3

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page

CVE-2026-23725 · controle/TipoSaidaControle.php · lines 2–79 · +61 −35

Medium · CVSS 5.3

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page

CVE-2026-23724 · controle/DestinoControle.php · lines 2–88 · +64 −39

Medium · CVSS 5.4

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page

CVE-2026-23724 · controle/TipoEntradaControle.php · lines 2–72 · +48 −29

Medium · CVSS 5.4

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page

CVE-2026-23724 · controle/TipoSaidaControle.php · lines 2–79 · +61 −35

Medium · CVSS 5.4

EPSS 0.2%2026-01-16

WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter

CVE-2026-23723 · controle/DestinoControle.php · lines 2–88 · +64 −39

High · CVSS 7.2

EPSS 0.4%2026-01-16

WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter

CVE-2026-23723 · controle/TipoEntradaControle.php · lines 2–72 · +48 −29

High · CVSS 7.2

EPSS 0.4%2026-01-16

WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter

CVE-2026-23723 · controle/TipoSaidaControle.php · lines 2–79 · +61 −35

High · CVSS 7.2

EPSS 0.4%2026-01-16

verificar

Overview

CVEs that patched it

Other functions in these files

Other hotspots in the repository

Frequently asked questions

References

Track LabRedesCefetRJ/WeGIA CVEs