{"schema":"vulnpedia.research/1","cve":"CVE-2026-111617","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://hackmd.io/@hieuPenguinnn/wharttest-ui-automation-websocket-missing-authentication","tags":["third-party-advisory","exploit"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:38:55.285Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:38:55.285Z","url":"https://hackmd.io/@hieuPenguinnn/wharttest-ui-automation-websocket-missing-authentication"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-16T19:28:17.272Z","url":"https://hackmd.io/@hieuPenguinnn/wharttest-ui-automation-websocket-missing-authentication"},{"source":"nvd","sourceId":"CVE-2026-111617","modified":"2026-10-16T20:17:20.710","url":"https://hackmd.io/@hieuPenguinnn/wharttest-ui-automation-websocket-missing-authentication"}]},{"url":"https://github.com/MGdaasLab/WHartTest/blob/v2.8.1/WHartTest_Django/wharttest_django/asgi.py#L41-L53","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:38:55.285Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:38:55.285Z","url":"https://github.com/MGdaasLab/WHartTest/blob/v2.8.1/WHartTest_Django/wharttest_django/asgi.py#L41-L53"},{"source":"nvd","sourceId":"CVE-2026-111617","modified":"2026-10-16T20:17:20.710","url":"https://github.com/MGdaasLab/WHartTest/blob/v2.8.1/WHartTest_Django/wharttest_django/asgi.py#L41-L53"}]},{"url":"https://github.com/MGdaasLab/WHartTest/blob/v2.8.1/WHartTest_Django/ui_automation/consumers.py#L129-L186","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:38:55.285Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:38:55.285Z","url":"https://github.com/MGdaasLab/WHartTest/blob/v2.8.1/WHartTest_Django/ui_automation/consumers.py#L129-L186"},{"source":"nvd","sourceId":"CVE-2026-111617","modified":"2026-10-16T20:17:20.710","url":"https://github.com/MGdaasLab/WHartTest/blob/v2.8.1/WHartTest_Django/ui_automation/consumers.py#L129-L186"}]},{"url":"https://www.vulncheck.com/advisories/wharttest-through-2.8.1-missing-authentication-on-ui-automation-websocket-endpoints","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:38:55.285Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-16T17:38:55.285Z","url":"https://www.vulncheck.com/advisories/wharttest-through-2.8.1-missing-authentication-on-ui-automation-websocket-endpoints"},{"source":"nvd","sourceId":"CVE-2026-111617","modified":"2026-10-16T20:17:20.710","url":"https://www.vulncheck.com/advisories/wharttest-through-2.8.1-missing-authentication-on-ui-automation-websocket-endpoints"}]},{"source":"euvd","sourceId":"EUVD-2026-103039","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103039","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-103039","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103039"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}