CVE-2026-111443 | Wheels up to 4.1.2 Request access control

October 16, 2026 Yanac

A vulnerability identified as critical has been detected in Wheels up to 4.1.2. This impacts an unknown function of the component Request Handler. This manipulation of the argument X-Wheels-Test-Context/WHEELS_TEST_CONTEXT/test-runner causes improper access controls.

This vulnerability is registered as CVE-2026-111443. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More