{
  "url": "https://www.videodioggi.com/cve-2026-10-17-en.html",
  "title": "CVE of the day — CVE-2026-110911 (CVSS 9,8, critic)",
  "language": "en",
  "published": "2026-10-17T00:48:44.127Z",
  "modified": "2026-10-17T00:48:44.127Z",
  "summary": "CVE-2026-110911: critical vulnerability, CVSS 9,8/10, type SQL injection, exploitable remotely, without privileges, without user interaction. Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quotad values are parsed as SQL by dynamic finders (such as findOneByEmail), the..",
  "keywords": [
    "c",
    "cve-2026-1111",
    "vulnerability",
    "critical vulnerability",
    "cwe-89",
    "cvs",
    "cybersecurity",
    "cybersecurity",
    "♪",
    "security update"
  ],
  "key_facts": [
    "CVE-2026- 1109 — CVE-2026-110911: Critical gravity, CVSS score 9,8 out of 10 according to the National Vulnerability Database.",
    "Sql injection — Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quotad values are parsed as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property..",
    "Exposure and mitigation — Remotely exploitable Vulnerability, without privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD."
  ],
  "transcript": "CVE-2026-110911: Critical gravity, CVSS score 9,8 out of 10 according to the National Vulnerability Database. Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quotad values are parsed as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property.. Remotely exploitable Vulnerability, without privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD.",
  "video": {
    "mp4": "https://www.videodioggi.com/videos/cve-2026-10-17-en.mp4",
    "poster": "https://www.videodioggi.com/videos/cve-2026-10-17-en.jpg",
    "duration_seconds": 20
  },
  "source": "www.videodioggi.com",
  "generator": "videodioggi procedural video engine"
}