CVE-2026-55681 | LabRedesCefetRJ WeGIA up to 3.8.5 Material/Patrimônio restaurar_produto_desocultar.php extract id_produto sql injection

October 14, 2026 Yanac

A vulnerability labeled as critical has been found in LabRedesCefetRJ WeGIA up to 3.8.5. The affected element is the function extract of the file web/html/matPat/restaurar_produto_desocultar.php of the component Material/Patrimônio Module. The manipulation of the argument id_produto results in sql injection.

This vulnerability is known as CVE-2026-55681. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More