CVE-2026-42871 MEDIUM

CVE-2026-42871: WeGIA: Error Handling familiar_docfamiliar

Vendor Labredescefetrj
Product WeGIA
Weakness CWE-200 · Info exposure
Published May 11, 2026
Last update May 13, 2026

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, atendido/familiar_docfamiliar.php displays an overly descriptive error message, including database-related details. This verbosity leads to information disclosure, which could assist a potential attacker in mapping the backend infrastructure and expanding the attack surface. This vulnerability is fixed in 3.7.0.

Key dates

02Disclosure timeline

May 11, 2026 CVE published
May 13, 2026 Record updated