CVE-2025-27133: Wegia

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was discovered in the WeGIA application prior to version 3.2.15 at the `adicionar_tipo_exame.php` endpoint. This vulnerability allows an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. Version 3.2.15 contains a patch for the issue.

Affected products

• Wegia Wegia: before 3.2.15 (fixed in 3.2.15)

Published 2025-02-24. Last modified 2026-06-17.