Skip to content

CVE record · 1 source

CVE-2026-111444

CVSS 9.8

Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies…

Vendor: Oracle
Product: MySQL, MariaDB
CVSS: 9.8
EPSS: 0.003 (p25)
Exposure class: Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

34

CVE NVD 16d ago

Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies…

Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to inline-literal paths. These include opt-in parameterize=false…

CVSS 9.8 Fix available CVE-2026-111444 Oracle