{"metadata": {"vulnerability": "CVE-2026-55684", "count": 12, "kinds": {"milestone": 3, "sighting": 3, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-06-17T00:13:10.650Z", "date_only": false, "value": "2026-06-17T00:13:10.650Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-55684", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T19:46:49.898Z", "date_only": false, "value": "2026-10-14T19:46:49.898Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-55684", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T19:46:49.898Z", "date_only": false, "value": "2026-10-14T19:46:49.898Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-55684", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T20:17:50.783Z", "date_only": false, "value": "2026-10-14T20:17:50.783", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55684", "record": "FKIE_CVE-2026-55684", "field": "published"}, {"timestamp": "2026-10-14T21:00:06.648Z", "date_only": false, "value": "2026-10-14T21:00:06.648260Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxugvn6nmu2r", "record": "CVE-2026-55684", "field": "creation_timestamp", "uuid": "2bd23a8a-92ab-44cd-8f0e-d04448e7e9c9", "content": "CVE-2026-55684 - wegia\nThe web manager for charitable groups allows anyone on the internet to send specially crafted data to a billing page, which the software adds directly into its database without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wegia #labredescefetrj #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxugvn6nmu2r"}, {"timestamp": "2026-10-14T22:10:05.671Z", "date_only": false, "value": "2026-10-14T22:10:05.671187Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxuksrx27m2l", "record": "CVE-2026-55684", "field": "creation_timestamp", "uuid": "8cd3951f-feee-42cb-a771-a3f3d28718af", "content": "\ud83d\udea8 CVE-2026-55684 \u2014 CVSS 9.8 CRITICAL\n\nWeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sist...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-55684\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxuksrx27m2l"}, {"timestamp": "2026-10-15T00:22:14.675Z", "date_only": false, "value": "2026-10-15T00:22:14.675321Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117442067437550218", "record": "CVE-2026-55684", "field": "creation_timestamp", "uuid": "34aa22ef-6ade-45cc-9a21-5b767e2fe4e5", "content": "CVE-2026-55684 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobrancas_geracao.php endpoint accepts form-encoded POST data through extract($_REQUEST) and interpolates codigo, descricao, data_emissao, data_vencimento, data_pagamento, valor, valor_pago, status, link_cobranca, link_boleto, linha_digitavel, and id_socio into a raw INSERT statement. Numeric parameters are unquoted and unvalidated, while string parameters can break out of their single-quoted SQL context. A remote attacker can execute arbitrary SQL to read or modify billing, member, employee, permission, and credential data or to delete database tables. This issue is fixed in version 3.8.6.\nhttps://www.cve.org/CVERecord?id=CVE-2026-55684https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-g2hm-m6gw-fcgghttps://github.com/LabRedesCefetRJ/WeGIA/issues/183https://github.com/LabRedesCefetRJ/WeGIA/pull/1705https://github.com/LabRedesCefetRJ/WeGIA/commit/38cb19baeee90b334817fb9b40f967996c9ee36bhttps://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.8.6#LabRedesCefetRJ #WeGIA#CVE_2026_55684#bot", "url": "https://infosec.exchange/users/cve/statuses/117442067437550218"}, {"timestamp": "2026-10-15T14:22:36.941Z", "date_only": false, "value": "2026-10-15T14:22:36.941091Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-55684", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T14:22:36.941Z", "date_only": false, "value": "2026-10-15T14:22:36.941091Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55684", "record": "FKIE_CVE-2026-55684", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T15:05:28.769Z", "date_only": false, "value": "2026-10-15T15:05:28.769Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-55684", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:05:28.769Z", "date_only": false, "value": "2026-10-15T15:05:28.769Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-55684", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T16:18:17Z", "date_only": false, "value": "2026-10-15T16:18:17.000", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55684", "record": "FKIE_CVE-2026-55684", "field": "lastModified"}]}