What is CVE-2026-33991?

CVE-2026-33991 is a publicly disclosed cybersecurity vulnerability with a HIGH severity rating and CVSS score of 8.8.

How to search for CVE vulnerabilities?

You can search the 4nuxd CVE database using CVE IDs, vendor names, product names, or severity levels.

CVE-2026-33991

HIGH8.8/ 10.0

Published: March 27, 2026 at 11:17 PM

Modified: March 31, 2026 at 08:57 PM

Source: security-advisories@github.com

Vulnerability Description

WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file `html/socio/sistema/deletar_tag.php` uses `extract($_REQUEST)` on line 14 and directly concatenates the `$id_tag` variable into SQL queries on lines 16-17 without prepared statements or sanitization. Version 3.6.7 patches the vulnerability.