{"metadata": {"vulnerability": "CVE-2026-55680", "count": 12, "kinds": {"milestone": 3, "sighting": 3, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-06-17T00:05:03.778Z", "date_only": false, "value": "2026-06-17T00:05:03.778Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-55680", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T19:42:22.402Z", "date_only": false, "value": "2026-10-14T19:42:22.402Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-55680", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T19:42:22.402Z", "date_only": false, "value": "2026-10-14T19:42:22.402Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-55680", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T20:17:50.193Z", "date_only": false, "value": "2026-10-14T20:17:50.193", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55680", "record": "FKIE_CVE-2026-55680", "field": "published"}, {"timestamp": "2026-10-14T21:00:04.956Z", "date_only": false, "value": "2026-10-14T21:00:04.956423Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxugvlovxf2h", "record": "CVE-2026-55680", "field": "creation_timestamp", "uuid": "1dcfd831-8c94-4848-af07-b791ecd7d2d0", "content": "CVE-2026-55680 - wegia\nThe web manager for charitable groups allows anyone on the internet to send a specially crafted request to the cadastro_cobranca.php page and cause the system to execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wegia #labredescefetrj #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxugvlovxf2h"}, {"timestamp": "2026-10-14T22:09:49.232Z", "date_only": false, "value": "2026-10-14T22:09:49.232059Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxuksc3y6v27", "record": "CVE-2026-55680", "field": "creation_timestamp", "uuid": "efdb63e7-62ff-404e-b29c-c296c1de80fe", "content": "\ud83d\udea8 CVE-2026-55680 \u2014 CVSS 9.8 CRITICAL\n\nWeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/ht...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-55680\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxuksc3y6v27"}, {"timestamp": "2026-10-15T00:18:12.862Z", "date_only": false, "value": "2026-10-15T00:18:12.862416Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117442051571079268", "record": "CVE-2026-55680", "field": "creation_timestamp", "uuid": "4cb7d26b-7d82-4b14-97a1-201e96346086", "content": "CVE-2026-55680 WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via \"codigo\" parameter WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastro_cobranca.php can place a quoted SQL expression in the codigo parameter, which extract($_REQUEST) passes into the WHERE codigo= clause of an UPDATE statement without validation or parameter binding. Quoting the value bypasses MariaDB type conversion for the VARCHAR column and permits arbitrary SQL execution without a session. An attacker can read or modify database content, including user credential hashes and billing records in the cobrancas table. This issue is fixed in version 3.8.6.\nhttps://www.cve.org/CVERecord?id=CVE-2026-55680https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-fxcc-q2j6-w2rfhttps://github.com/LabRedesCefetRJ/WeGIA/issues/184https://github.com/LabRedesCefetRJ/WeGIA/pull/1705https://github.com/LabRedesCefetRJ/WeGIA/commit/f819be361f984592c4b5a35db830495b4e2263fahttps://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.8.6#LabRedesCefetRJ #WeGIA#CVE_2026_55680#bot", "url": "https://infosec.exchange/users/cve/statuses/117442051571079268"}, {"timestamp": "2026-10-15T14:22:39.272Z", "date_only": false, "value": "2026-10-15T14:22:39.272170Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-55680", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T14:22:39.272Z", "date_only": false, "value": "2026-10-15T14:22:39.272170Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55680", "record": "FKIE_CVE-2026-55680", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T15:05:34.259Z", "date_only": false, "value": "2026-10-15T15:05:34.259Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-55680", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:05:34.259Z", "date_only": false, "value": "2026-10-15T15:05:34.259Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-55680", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T16:18:16.273Z", "date_only": false, "value": "2026-10-15T16:18:16.273", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55680", "record": "FKIE_CVE-2026-55680", "field": "lastModified"}]}