All 5 CVE vulnerabilities found in Camaleon CMS, with AI-generated Chinese analysis, references, and POCs.
Vendor: owen2345
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-120430 | Camaleon CMS before 2.9.2 IDOR via Admin::CategoriesController CWE-639 | 5.4 | Medium | 2026-11-02 |
| CVE-2026-120429 | Camaleon CMS before 2.9.2 Missing Authorization via Admin::MediaController CWE-862 | 7.1 | High | 2026-11-02 |
| CVE-2026-102261 | owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization CWE-639 | 5.4 | Medium | 2026-09-29 |
| CVE-2026-10715 | Camaleon CMS 2.9.2 - Improper authorization in draft autosave endpoint CWE-862 | - | - | 2026-06-12 |
| CVE-2026-1776 | Camaleon CMS AWS Uploader Authenticated Path Traversal Arbitrary File Read CWE-22 | 6.0 | Medium | 2026-03-09 |
All 5 known CVE vulnerabilities affecting Camaleon CMS with full Chinese analysis, references, and POCs where available.