CVE-2026-28411 | LabRedesCefetRJ WeGIA up to 3.6.4 extract _REQUEST authentication bypass (GHSA-g7r9-hxc8-8vh7)

February 28, 2026 Yanac

A vulnerability was found in LabRedesCefetRJ WeGIA up to 3.6.4. It has been rated as critical. Impacted is the function extract. Performing a manipulation of the argument _REQUEST results in authentication bypass using alternate channel.

This vulnerability was named CVE-2026-28411. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More