CVE-2025-24906

Summary

CVE-2025-24906 is a SQL Injection vulnerability affecting the WeGIA application's `get_detalhes_cobranca.php` endpoint. An attacker with authorized access could exploit this flaw to execute arbitrary SQL queries, potentially gaining unauthorized access to or deletion of sensitive information. WeGIA users are urged to upgrade to version 3.2.12 to address this issue, as no known workarounds exist.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.