CVE-2026-45027

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, when a user logs in, html/login.php hashes the submitted password using PHP's hash() function with the SHA-256 algorithm and no salt before comparing it to the stored value. The password change flow in controle/FuncionarioControle.php follows the same pattern. SHA-256 is a general-purpose cryptographic hash built for speed, not password storage. Without a salt, identical passwords produce identical digests, making the entire hash database vulnerable to a single precomputed rainbow table lookup. This vulnerability is fixed in 3.7.3.

CVSS v3 5.9 MEDIUM

5.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-hcgv-vmq6-j6qg
https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-hcgv-vmq6-j6qg

Configurations

No configuration.

History

26 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) WeGIA es un gestor web para instituciones benéficas. En versiones anteriores a la 3.7.3, cuando un usuario inicia sesión, html/login.php aplica hash a la contraseña enviada utilizando la función hash() de PHP con el algoritmo SHA-256 y sin salt antes de compararla con el valor almacenado. El flujo de cambio de contraseña en controle/FuncionarioControle.php sigue el mismo patrón. SHA-256 es un hash criptográfico de propósito general diseñado para la velocidad, no para el almacenamiento de contraseñas. Sin un salt, las contraseñas idénticas producen digests idénticos, haciendo que toda la base de datos de hashes sea vulnerable a una única búsqueda en una tabla arcoíris precalculada. Esta vulnerabilidad se corrige en la 3.7.3.

Information

Published : 2026-05-27 17:16

Updated : 2026-10-26 11:10

NVD link : CVE-2026-45027

Mitre link : CVE-2026-45027

CVE.ORG link : CVE-2026-45027

JSON object : View

Products Affected

No product.

CWE

CWE-759

Use of a One-Way Hash without a Salt

CWE-916

Use of Password Hash With Insufficient Computational Effort

{"id": "CVE-2026-45027", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-45027", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-27T17:51:37.251231Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "LabRedesCefetRJ", "product": "WeGIA", "versions": [{"status": "affected", "version": "< 3.7.3"}]}]}], "published": "2026-05-27T17:16:40.227", "references": [{"url": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-hcgv-vmq6-j6qg", "source": "security-advisories@github.com"}, {"url": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-hcgv-vmq6-j6qg", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-759"}, {"lang": "en", "value": "CWE-916"}]}], "descriptions": [{"lang": "en", "value": "WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, when a user logs in, html/login.php hashes the submitted password using PHP's hash() function with the SHA-256 algorithm and no salt before comparing it to the stored value. The password change flow in controle/FuncionarioControle.php follows the same pattern. SHA-256 is a general-purpose cryptographic hash built for speed, not password storage. Without a salt, identical passwords produce identical digests, making the entire hash database vulnerable to a single precomputed rainbow table lookup. This vulnerability is fixed in 3.7.3."}, {"lang": "es", "value": "WeGIA es un gestor web para instituciones ben\u00e9ficas. En versiones anteriores a la 3.7.3, cuando un usuario inicia sesi\u00f3n, html/login.php aplica hash a la contrase\u00f1a enviada utilizando la funci\u00f3n hash() de PHP con el algoritmo SHA-256 y sin salt antes de compararla con el valor almacenado. El flujo de cambio de contrase\u00f1a en controle/FuncionarioControle.php sigue el mismo patr\u00f3n. SHA-256 es un hash criptogr\u00e1fico de prop\u00f3sito general dise\u00f1ado para la velocidad, no para el almacenamiento de contrase\u00f1as. Sin un salt, las contrase\u00f1as id\u00e9nticas producen digests id\u00e9nticos, haciendo que toda la base de datos de hashes sea vulnerable a una \u00fanica b\u00fasqueda en una tabla arco\u00edris precalculada. Esta vulnerabilidad se corrige en la 3.7.3."}], "lastModified": "2026-10-26T11:10:00.157", "sourceIdentifier": "security-advisories@github.com"}