{"schema":"vulnpedia.research/1","cve":"CVE-2026-111444","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/wheels-dev/wheels/security/advisories/GHSA-mvr9-2h5x-w6cq","tags":["vendor-advisory"],"source":"mitre","sourceId":"mitre","modified":"2026-10-16T03:31:30.485Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2026-10-16T03:31:30.485Z","url":"https://github.com/wheels-dev/wheels/security/advisories/GHSA-mvr9-2h5x-w6cq"},{"source":"nvd","sourceId":"CVE-2026-111444","modified":"2026-10-16T15:19:36.177","url":"https://github.com/wheels-dev/wheels/security/advisories/GHSA-mvr9-2h5x-w6cq"}]},{"source":"euvd","sourceId":"EUVD-2026-102606","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102606","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-102606","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102606"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/Syscallh00k/CVE-2026-111444","source":"poc-in-github","sourceId":"CVE-2026-111444","description":"Wheels SQL injection on MySQL/MariaDB with backslash escaping enabled","modified":"2026-10-16T04:40:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-111444","url":"https://github.com/Syscallh00k/CVE-2026-111444"},{"source":"poc-in-github","sourceId":"CVE-2026-111444","modified":"2026-10-16T04:40:40Z","url":"https://github.com/Syscallh00k/CVE-2026-111444"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[]}