CVE-2026-111446 - Wheels Improper Access Control Vulnerability
CVE ID :CVE-2026-111446 Published : Oct. 16, 2026, 4:18 a.m. | 1 hour, 15 minutes ago Description :Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients when enablePublicComponent=true, as it is by default in development. Before 4.1.2 these tools...