WeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenha
WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any authenticated user to change their account password without providing existing credentials by exploiting the unconditional exclusion of the alterarSenha method from permission checks in controle/control.php. Attackers can manipulate the redir parameter to point to alterar_senha.php, routing through verificarSenhaConfig() instead of verificarSenha() to bypass current password verification and convert temporary session access into permanent account takeover.
CVE-2026-76633
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-76633
WeGIA
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://github.com/LabRedesCefetRJ/WeGIA",
"vendor": "LabRedesCefetRJ",
"product": "WeGIA",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "3.9.2",
"versionType": "semver"
}
],
"packageURL": "pkg:github/LabRedesCefetRJ/WeGIA",
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-76633
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #5521 · Revision 1
- Added to Heist Feed
- Publisher date