owen2345 Camaleon CMS

• CVE-2026-120430 Medium 5.4 Camaleon CMS before 2.9.2 IDOR via Admin::CategoriesController 0.3%
• CVE-2026-120429 High 7.1 Camaleon CMS before 2.9.2 Missing Authorization via Admin::MediaController 0.3%
• CVE-2026-116009 High 8.8 Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action 0.4%
• CVE-2026-102261 Medium 5.4 owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization 0.3%
• CVE-2026-67616 Medium 4.3 Camaleon CMS 2.9.2 Missing Authorization via /admin/post_type drafts endpoint 0.4%
• CVE-2026-66748 High 8.8 Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field 1.1%
• CVE-2026-1776 Medium 6.0 Camaleon CMS AWS Uploader Authenticated Path Traversal Arbitrary File Read 0.8%
• CVE-2025-2304 Critical 9.4 Camaleon CMS Privilege Escalation 0.6%
• CVE-2024-46987 High 7.7 Arbitrary path traversal in Camaleon CMS 14.6%
• CVE-2024-46986 Critical 10.0 Arbitrary file write leading to RCE in Camaleon CMS 37.1%