The vulnerability CVE-2026-45335 is an Open Redirect issue in the WeGIA application by LabRedesCefetRJ. It occurs in the /WeGIA/controle/control.php endpoint when the nextPage parameter is combined with metodo=listarTodos and nomeClasse=InternoControle. The application fails to validate or restrict the nextPage parameter, allowing attackers to redirect users to arbitrary external URLs. This can be exploited to conduct phishing or social engineering attacks by redirecting users from a trusted domain to malicious sites. The issue affects versions earlier than 3.7.3 and is resolved in version 3.7.3.

Successful exploitation allows attackers to redirect users to arbitrary external websites, potentially leading to phishing, credential theft, malware distribution, or social engineering attacks. The vulnerability impacts confidentiality and integrity to a limited extent but does not affect availability. No known active exploitation has been reported.

Upgrade WeGIA to version 3.7.3 or later, where this Open Redirect vulnerability is fixed. Since the product is not a cloud service, remediation depends on applying this official fix. Patch status is confirmed by the vendor advisory indicating the issue is resolved in 3.7.3.