Description
WeGIA 3.6.5之前版本存在操作系统命令注入漏洞，该漏洞源于数据库恢复功能对特制备份文件名的处理不当，可能导致具有管理员权限的攻击者执行任意操作系统命令。
WeGIA 操作系统命令注入漏洞CVE-2026-28409
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2026-28409
https://cve.imfht.com/detail/CVE-2026-28409
https://www.gm7.org/archives/48232
https://ddpoc.com/DVB-2026-11138.html
https://nvd.nist.gov/vuln/detail/CVE-2026-28409
https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-5m5g-q2vv-rv3r
https://mondoo.com/vulnerability-intelligence/vulnerability/CVE-2026-28409
https://access.redhat.com/security/cve/cve-2026-28409