CVE-2026-111448 | Wheels up to 4.1.2 Path Containment Check/Database Dump Output path traversal

October 16, 2026 Yanac

A vulnerability, which was classified as critical, was found in Wheels up to 4.1.2. Impacted is an unknown function of the component Path Containment Check/Database Dump Output. Such manipulation leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-111448. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More