CVE WATCH / VULNERABILITY DETAIL
CVE-2026-111451
HIGHCVSS 7.8NVD feed
Published 16 October 2026 · tracked since 17 October 2026
Description
Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during builds. Package removal and destroy paths can delete unintende
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-63618 HIGH 7.5
- CVE-2026-111391 HIGH 8.1
- CVE-2026-92766 HIGH 7.5
- CVE-2026-111311 HIGH 8.8
- CVE-2026-75903 HIGH 8.1
- CVE-2026-92553 HIGH 8.8
- CVE-2026-97296 HIGH 8.1
- CVE-2026-92115 HIGH 8.8
- CVE-2026-110015 HIGH 8.8
- CVE-2026-110135 HIGH 7.4