CVE-2026-77112 is a Server-Side Request Forgery (SSRF) vulnerability affecting Weoll software by Global IT Informatics Technology Services Inc. Versions prior to 3.2.45.44 are vulnerable. The flaw allows an unauthenticated attacker to cause the server to send crafted HTTP requests to arbitrary destinations, potentially exposing sensitive information. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

Successful exploitation can lead to unauthorized disclosure of sensitive information accessible by the server, as indicated by the high confidentiality impact. There is no impact on data integrity or system availability. No known exploits are reported in the wild at this time.

No explicit patch or remediation details are provided. Since the affected versions are prior to 3.2.45.44, upgrading to version 3.2.45.44 or later is recommended if available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.