Vulnerability in Labredescefetrj Wegia
CVE-2026-31894
WeGIA is a web manager for charitable institutions. In 3.6.5, The patched loadBackupDB() extracts tar.gz archives to a temporary directory using PHP's PharData class, then uses glob() and file_get_contents() to read SQL files from the extr…
EPSS: 0.001 (26.5th percentile) — read the EPSS interpretation.
Affected products
- Labredescefetrj Wegia — versions >= 3.6.5, < 3.6.6