CamaleonCMS vulnerabilities

CVEs whose affected-version data names the CamaleonCMS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-56721High· 8.8

2mo ago

CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersController

CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference (IDOR) that allows authenticated low-privileged attackers to overwrite any user's credentials by exploiting a parame…

▾ Twilightowen2345 · CamaleonCMSEPSS 0.52%via CVEORG