Oowen2345

Products

Exploited and recent CVEs

• CVE-2026-120430 Medium 5.4 Camaleon CMS before 2.9.2 IDOR via Admin::CategoriesController 0.3%
• CVE-2026-120429 High 7.1 Camaleon CMS before 2.9.2 Missing Authorization via Admin::MediaController 0.3%
• CVE-2026-116009 High 8.8 Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action 0.4%
• CVE-2026-102261 Medium 5.4 owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization 0.3%
• CVE-2026-86100 Medium 6.4 Camaleon CMS 2.7.5 through 2.9.1 SSRF via HTTP Redirect in Upload from URL 0.3%
• CVE-2026-73326 High 7.6 CamaleonCMS Missing Authorization via Plugin Administration Endpoints 0.4%
• CVE-2026-73332 High 8.7 CamaleonCMS cama_contact_form Plugin Stored XSS via before_html Field 0.4%
• CVE-2026-73331 High 7.1 CamaleonCMS 2.9.1 Authenticated SQL Injection via Post Slug Field 0.4%
• CVE-2026-73330 Medium 6.6 CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action 0.8%
• CVE-2026-73329 High 8.7 CamaleonCMS Stored XSS via Draft Post Title Creation Endpoint 0.4%
• CVE-2026-56721 High 8.8 CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersController 0.5%
• CVE-2026-56720 Medium 4.3 CamaleonCMS 2.9.2 and earlier Missing Authorization via profile Action 0.3%
• CVE-2026-67616 Medium 4.3 Camaleon CMS 2.9.2 Missing Authorization via /admin/post_type drafts endpoint 0.4%
• CVE-2026-66748 High 8.8 Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field 1.1%
• CVE-2026-1776 Medium 6.0 Camaleon CMS AWS Uploader Authenticated Path Traversal Arbitrary File Read 0.8%
• CVE-2025-2304 Critical 9.4 Camaleon CMS Privilege Escalation 0.6%
• CVE-2024-46987 High 7.7 Arbitrary path traversal in Camaleon CMS 14.6%
• CVE-2024-46986 Critical 10.0 Arbitrary file write leading to RCE in Camaleon CMS 37.1%