Vulnerability · Published Sep 4, 2026 · Assigned by VulnCheck
CVE-2026-86100Camaleon CMS 2.7.5 through 2.9.1 SSRF via HTTP Redirect in Upload from URL
Medium 6.4
In plain English
A medium-severity server-side request forgery in CamaleonCMS from owen2345. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 3.1)6.4Medium
Exploit odds (30 days)0.3%top 74.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote files in the Upload from URL media feature. Authenticated attackers can supply URLs that pass initial validation but redirect to internal network addresses, allowing server-side request forgery to internal services.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| owen2345 | CamaleonCMS | 2.7.5 – before 2.9.2 |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
References
- Product Repository product
- Fix Pull Request patch, issue-tracking
- Patch Commit patch
- Vulnerable open-uri fetch in cama_tmp_upload technical-description
- 2.9.2 Release Notes release-notes
- VulnCheck Advisory: Camaleon CMS 2.7.5 through 2.9.1 SSRF via HTTP Redirect in Upload from URL third-party-advisory