CVE-2026-110911 | Wheels up to 4.1.1 Query Builder whereBetween sql injection

October 15, 2026 Yanac

A vulnerability, which was classified as critical, was found in Wheels up to 4.1.1. Affected by this vulnerability is the function whereBetween of the component Query Builder. Such manipulation leads to sql injection.

This vulnerability is traded as CVE-2026-110911. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More