← العودة للجدول
CVE-2026-111443
CVE-2026-111443 — Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into
📅 2026-10-16
🟡 Medium 🔥 No NVD Vulnerability Vulnerability CVSS 6.5

📋 الوصف الكامل

Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an X-Wheels-Test-Context header or WHEELS_TEST_CONTEXT cookie with any value, or including a test-runner path anywhere in the URL, even the query string. The alternate application uses the same configuration, environment, datasource and debug se

💻 الأنظمة المتأثرة

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-111443

📡 المصدر

NVD

✅ الحلول والتخفيف

Refer to CVE-2026-111443 NVD advisory

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←