Login Request a demo
CA
Product
camaleon-cms
by owen2345 · last CVE Oct 24, 2026
5
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add camaleon-cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-116009
New
8.8
0%
Oct 24
Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action
Affected: before 2.9.3
CVE-2026-66748
8.8
1%
Jul 28
Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field
Affected: 2.1.1 through 2.9.1; 2.9.2
CVE-2026-1776
6.5
1%
Mar 9
Camaleon CMS AWS Uploader Authenticated Path Traversal Arbitrary File Read
Affected: 2.4.5.0 through 2.9.0
CVE-2026-102261
5.4
0%
Sep 29
owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization
Affected: 2.9.0; 2.9.1; 2.9.2
CVE-2026-67616
4.3
0%
Aug 3
Camaleon CMS 2.9.2 Missing Authorization via /admin/post_type drafts endpoint
Affected: through 2.9.2
Showing 5