CVE-2026-76634: Authorization Bypass Through User-Controlled Key in LabRedesCefetRJ WeGIA

CVE-2026-76634 describes an authorization bypass vulnerability in LabRedesCefetRJ's WeGIA product prior to version 3.9.2. The flaw exists in the employee profile page where an authenticated attacker can inject a user-controlled id_pessoa parameter through a request extraction function. This injection overwrites the session-derived identifier, enabling the attacker to access arbitrary employee records without proper authorization. The vulnerability allows enumeration of all user identifiers and exposure of full profile data including personal and administrative information.

An attacker with authenticated access can bypass authorization controls to view sensitive employee information for any user in the system. This includes personally identifiable information (PII) such as name, CPF (Brazilian individual taxpayer registry identification), address, contact details, and administrative flags. The exposure of this data can lead to privacy violations and potential misuse of administrative privileges.

A fix is available in WeGIA version 3.9.2. Users should upgrade to version 3.9.2 or later to remediate this vulnerability. No additional mitigation guidance is provided in the vendor advisory; applying the official patch is the recommended action.