CVE-2026-54670 | LabRedesCefetRJ WeGIA up to 3.8.4 Contribution Request Dispatcher control.php getContribuicoesLogJSON nomeClasse/metodo improper authentication

September 17, 2026 Yanac

A vulnerability categorized as critical has been discovered in LabRedesCefetRJ WeGIA up to 3.8.4. Affected by this issue is the function getContribuicoesLogJSON of the file web/html/contribuicao/controller/control.php of the component Contribution Request Dispatcher. Executing a manipulation of the argument nomeClasse/metodo can lead to improper authentication.

The identification of this vulnerability is CVE-2026-54670. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More