CVE-2026-111447 - Wheels Insecure Direct Object Reference Vulnerability
CVE ID :CVE-2026-111447 Published : Oct. 16, 2026, 4:18 a.m. | 1 hour, 15 minutes ago Description :Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the parent being saved. A user able to submit a nested form for their own...