← العودة للجدول
CVE-2026-110909
CVE-2026-110909 — Wheels CLI through 4.1.0 does not verify that the local development server answe
📅 2026-10-15
🟡 Medium 🔥 No NVD Exploit Exploit CVSS 5

📋 الوصف الكامل

Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A process listening on a port targeted by the CLI can receive the project's reload password and code submitted through wheels reload or wheels console; console also probes common ports when the project server is down. Other commands can perform unintended stat

💻 الأنظمة المتأثرة

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-110909

📡 المصدر

NVD

✅ الحلول والتخفيف

Refer to CVE-2026-110909 NVD advisory

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←