CVE-2026-55684 | LabRedesCefetRJ WeGIA up to 3.8.5 cadastro_cobrancas_geracao.php extract sql injection

October 14, 2026 Yanac

A vulnerability described as critical has been identified in LabRedesCefetRJ WeGIA up to 3.8.5. This affects the function extract of the file web/html/socio/sistema/cadastro_cobrancas_geracao.php. Such manipulation of the argument codigo/descricao/data_emissao/data_vencimento/data_pagamento/valor/valor_pago/status/link_cobranca/link_boleto/linha_digitavel/id_socio leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-55684. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More