CVE-2026-76634CWE-639

CVE-2026-76634

Medium · published August 20, 2026

CVSS v3.1

6.5

EPSS

Percentile

33.3

In the wild

Unconfirmed

What it is

WeGIA before 3.9.2 contains an insecure direct object reference vulnerability in the employee profile page that allows authenticated attackers to access arbitrary employee records by injecting an id_pessoa parameter through a request extraction function that overwrites the session-derived identifier. Attackers can enumerate all user identifiers to retrieve full profile data for any employee account, including name, CPF, address, contact details, and administrative flags.

The record

Technical detail

CVSS v3.1: 6.5 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: 7.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS: 0.00402 · 33.3th percentile
Weakness: CWE-639 · Authorization Bypass Through User-Controlled Key
Published: 2026-08-20T18:17Z

References (4)

https://github.com/LabRedesCefetRJ/WeGIA/releases#release-3.9.2 · [email protected]https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-jqh5-66qr-85qv · [email protected]https://www.vulncheck.com/advisories/wegia-insecure-direct-object-reference-via-profile-funcionario-php · [email protected]https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-jqh5-66qr-85qv · 134c704f-9b21-4f2e-91b3-4a467353bcc0

EPSS history

Timeline

20 AUG 13:48Z
WeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.php
cvelistv5