# LabRedesCefetRJ vulnerabilities Source: https://junglewise.ai/threats/vendors/labredescefetrj Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/labredescefetrj.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 23 vulnerabilities in LabRedesCefetRJ: 0 in the last 7 days and 7 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-61719, was published on 29 October 2026. 3 vulnerabilities in the last four weeks, up 50% on the four before (2). 0 critical against 1. 1 technology has a page of its own. ## Counts - Last 7 days: 0 - Last 30 days: 3 - Last 90 days: 7 - All time: 23 (1 critical, 0 exploited in the wild) ## About LabRedesCefetRJ LabRedes is a research laboratory at the Federal Center for Technological Education of Rio de Janeiro (CEFET/RJ). ## Latest LabRedesCefetRJ vulnerabilities - [CVE-2026-61719: WeGIA stored cross-site scripting in medical records](https://junglewise.ai/threats/cve-2026-61719-wegia-is-a-web-manager-for-charitable-institutions-prior-to-3-8-7) (high, CVSS 8.9, published 29 Oct 2026) - [CVE-2026-61673: WeGIA stored DOM cross-site scripting in memorandum dispatch](https://junglewise.ai/threats/cve-2026-61673-wegia-is-a-web-manager-for-charitable-institutions-prior-to-3-8-7) (info, published 29 Oct 2026) - [CVE-2026-55679: WeGIA pre-installation installer command injection and SQL injection](https://junglewise.ai/threats/cve-2026-55679-wegia-is-a-web-manager-for-charitable-institutions-prior-to-3-8-6) (medium, CVSS 6.5, published 14 Oct 2026) - [CVE-2026-54767: WeGIA unauthenticated database truncation in member endpoint](https://junglewise.ai/threats/cve-2026-54767-wegia-unauthenticated-database-truncation-in-member-endpoint) (critical, CVSS 9.1, published 17 Sep 2026) - [CVE-2026-54671: WeGIA authorization bypass in InternoControle](https://junglewise.ai/threats/cve-2026-54671-wegia-authorization-bypass-in-internocontrole) (high, CVSS 8.8, published 17 Sep 2026) - [CVE-2026-76634: WeGIA insecure direct object reference in employee profile](https://junglewise.ai/threats/cve-2026-76634-wegia-insecure-direct-object-reference-in-employee-profile) (medium, CVSS 6.5, published 20 Aug 2026) - [CVE-2026-76633: WeGIA authorization bypass in password change](https://junglewise.ai/threats/cve-2026-76633-wegia-authorization-bypass-in-password-change) (high, CVSS 8.1, published 20 Aug 2026) - [CVE-2026-45335: LabRedesCefetRJ WeGIA open redirect in control.php](https://junglewise.ai/threats/cve-2026-45335-labredescefetrj-wegia-open-redirect-in-control-php) (medium, CVSS 5.4, published 27 May 2026) - [CVE-2026-45027: LabRedesCefetRJ WeGIA weak password hashing in login.php](https://junglewise.ai/threats/cve-2026-45027-labredescefetrj-wegia-weak-password-hashing-in-login-php) (medium, CVSS 5.9, published 27 May 2026) - [CVE-2026-45026: LabRedesCefetRJ WeGIA stored XSS in Processo de Aceitação](https://junglewise.ai/threats/cve-2026-45026-labredescefetrj-wegia-stored-xss-in-processo-de-aceitacao) (medium, CVSS 6.8, published 11 May 2026) - [CVE-2026-45025: LabRedesCefetRJ WeGIA stored XSS in etapa_processo.php](https://junglewise.ai/threats/cve-2026-45025-labredescefetrj-wegia-stored-xss-in-etapa-processo-php) (medium, CVSS 6.8, published 11 May 2026) - [CVE-2026-42873: LabRedesCefetRJ WeGIA information disclosure in file upload error handling](https://junglewise.ai/threats/cve-2026-42873-labredescefetrj-wegia-information-disclosure-in-file-upload-error) (info, CVSS 0, published 11 May 2026) - [CVE-2026-42872: LabRedesCefetRJ WeGIA reflected XSS in lista_arquivos_etapa.php](https://junglewise.ai/threats/cve-2026-42872-labredescefetrj-wegia-reflected-xss-in-lista-arquivos-etapa-php) (medium, CVSS 6.1, published 11 May 2026) - [CVE-2026-42870: LabRedesCefetRJ WeGIA stored XSS in staff profile description](https://junglewise.ai/threats/cve-2026-42870-labredescefetrj-wegia-stored-xss-in-staff-profile-description) (info, CVSS 6.4, published 11 May 2026) - [CVE-2026-42871: LabRedesCefetRJ WeGIA information disclosure in familiar_docfamiliar.php](https://junglewise.ai/threats/cve-2026-42871-labredescefetrj-wegia-information-disclosure-in-familiar) (info, CVSS 6.9, published 11 May 2026) - [CVE-2026-35475: LabRedesCefetRJ WeGIA open redirect in backup.php](https://junglewise.ai/threats/cve-2026-35475-labredescefetrj-wegia-open-redirect-in-backup-php) (medium, CVSS 6.1, published 6 Apr 2026) - [CVE-2026-35474: LabRedesCefetRJ WeGIA open redirect in atualizacao.php](https://junglewise.ai/threats/cve-2026-35474-labredescefetrj-wegia-open-redirect-in-atualizacao-php) (medium, CVSS 6.1, published 6 Apr 2026) - [CVE-2026-35473: LabRedesCefetRJ WeGIA open redirect in control.php](https://junglewise.ai/threats/cve-2026-35473-labredescefetrj-wegia-open-redirect-in-control-php) (medium, CVSS 6.1, published 6 Apr 2026) - [CVE-2026-35472: LabRedesCefetRJ WeGIA open redirect in control.php](https://junglewise.ai/threats/cve-2026-35472-labredescefetrj-wegia-open-redirect-in-control-php) (medium, CVSS 6.1, published 6 Apr 2026) - [CVE-2026-35399: LabRedesCefetRJ WeGIA stored XSS in backup filenames](https://junglewise.ai/threats/cve-2026-35399-labredescefetrj-wegia-stored-xss-in-backup-filenames) (medium, CVSS 6.1, published 6 Apr 2026) - [CVE-2026-35398: LabRedesCefetRJ WeGIA open redirect in control.php](https://junglewise.ai/threats/cve-2026-35398-labredescefetrj-wegia-open-redirect-in-control-php) (medium, CVSS 6.1, published 6 Apr 2026) - [CVE-2026-35396: LabRedesCefetRJ WeGIA open redirect in control.php](https://junglewise.ai/threats/cve-2026-35396-labredescefetrj-wegia-open-redirect-in-control-php) (medium, CVSS 6.1, published 6 Apr 2026) - [CVE-2026-35395: LabRedesCefetRJ WeGIA SQL injection in DespachoDAO.php](https://junglewise.ai/threats/cve-2026-35395-labredescefetrj-wegia-sql-injection-in-despachodao-php) (high, CVSS 8.8, published 6 Apr 2026) ## Most severe LabRedesCefetRJ vulnerabilities - [CVE-2026-54767: WeGIA unauthenticated database truncation in member endpoint](https://junglewise.ai/threats/cve-2026-54767-wegia-unauthenticated-database-truncation-in-member-endpoint) (critical, CVSS 9.1, published 17 Sep 2026) - [CVE-2026-61719: WeGIA stored cross-site scripting in medical records](https://junglewise.ai/threats/cve-2026-61719-wegia-is-a-web-manager-for-charitable-institutions-prior-to-3-8-7) (high, CVSS 8.9, published 29 Oct 2026) - [CVE-2026-54671: WeGIA authorization bypass in InternoControle](https://junglewise.ai/threats/cve-2026-54671-wegia-authorization-bypass-in-internocontrole) (high, CVSS 8.8, published 17 Sep 2026) - [CVE-2026-35395: LabRedesCefetRJ WeGIA SQL injection in DespachoDAO.php](https://junglewise.ai/threats/cve-2026-35395-labredescefetrj-wegia-sql-injection-in-despachodao-php) (high, CVSS 8.8, published 6 Apr 2026) - [CVE-2026-76633: WeGIA authorization bypass in password change](https://junglewise.ai/threats/cve-2026-76633-wegia-authorization-bypass-in-password-change) (high, CVSS 8.1, published 20 Aug 2026) - [CVE-2026-45026: LabRedesCefetRJ WeGIA stored XSS in Processo de Aceitação](https://junglewise.ai/threats/cve-2026-45026-labredescefetrj-wegia-stored-xss-in-processo-de-aceitacao) (medium, CVSS 6.8, published 11 May 2026) - [CVE-2026-45025: LabRedesCefetRJ WeGIA stored XSS in etapa_processo.php](https://junglewise.ai/threats/cve-2026-45025-labredescefetrj-wegia-stored-xss-in-etapa-processo-php) (medium, CVSS 6.8, published 11 May 2026) - [CVE-2026-55679: WeGIA pre-installation installer command injection and SQL injection](https://junglewise.ai/threats/cve-2026-55679-wegia-is-a-web-manager-for-charitable-institutions-prior-to-3-8-6) (medium, CVSS 6.5, published 14 Oct 2026) - [CVE-2026-76634: WeGIA insecure direct object reference in employee profile](https://junglewise.ai/threats/cve-2026-76634-wegia-insecure-direct-object-reference-in-employee-profile) (medium, CVSS 6.5, published 20 Aug 2026) - [CVE-2026-35399: LabRedesCefetRJ WeGIA stored XSS in backup filenames](https://junglewise.ai/threats/cve-2026-35399-labredescefetrj-wegia-stored-xss-in-backup-filenames) (medium, CVSS 6.1, published 6 Apr 2026) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, up 50% on the four before (2). 0 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 2 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 2 | 1 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 2 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## LabRedesCefetRJ technologies - [LabRedesCefetRJ WeGIA](https://junglewise.ai/threats/technologies/wegia): 23 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "LabRedesCefetRJ vulnerabilities", https://junglewise.ai/threats/vendors/labredescefetrj, 9 November 2026.