OW
Vendor
owen2345
13
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116009 New | CA camaleon-cms owen2345 | 8.8 | Oct 24 | Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action |
| CVE-2026-102261 | CC Camaleon CMS owen2345 | 5.4 | Sep 29 | owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization |
| CVE-2026-86100 | CA CamaleonCMS owen2345 | 6.4 | Sep 4 | Camaleon CMS 2.7.5 through 2.9.1 SSRF via HTTP Redirect in Upload from URL |
| CVE-2026-73326 | CA CamaleonCMS owen2345 | 7.6 | Aug 12 | CamaleonCMS Missing Authorization via Plugin Administration Endpoints |
| CVE-2026-73332 | CA CamaleonCMS owen2345 | 8.7 | Aug 12 | CamaleonCMS cama_contact_form Plugin Stored XSS via before_html Field |
| CVE-2026-73331 | CA CamaleonCMS owen2345 | 7.1 | Aug 12 | CamaleonCMS 2.9.1 Authenticated SQL Injection via Post Slug Field |
| CVE-2026-73330 | CA CamaleonCMS owen2345 | 6.6 | Aug 12 | CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action |
| CVE-2026-73329 | CA CamaleonCMS owen2345 | 8.7 | Aug 12 | CamaleonCMS Stored XSS via Draft Post Title Creation Endpoint |
| CVE-2026-56721 | CA CamaleonCMS owen2345 | 8.8 | Aug 11 | CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersController |
| CVE-2026-56720 | CA CamaleonCMS owen2345 | 4.3 | Aug 11 | CamaleonCMS 2.9.2 and earlier Missing Authorization via profile Action |
| CVE-2026-67616 | CA camaleon-cms owen2345 | 4.3 | Aug 3 | Camaleon CMS 2.9.2 Missing Authorization via /admin/post_type drafts endpoint |
| CVE-2026-66748 | CA camaleon-cms owen2345 | 8.8 | Jul 28 | Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field |
| CVE-2026-1776 | CC Camaleon CMS owen2345 | 6.5 | Mar 9 | Camaleon CMS AWS Uploader Authenticated Path Traversal Arbitrary File Read |