CVE-2026-116281Low· 3.3▾ SunlitA vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability is the function ListProfiles of the file client-engine-application/t.cs of the component Profile Controller. The manipulation leads to information d…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability is the function ListProfiles of the file client-engine-application/t.cs of the component Profile Controller. The manipulation leads to information disclosure. The attack can only be performed from a local environment. Upgrading to version 5.2.0 addresses this issue. Upgrading the affected component is recommended.
Kameleo 5.0.1.0Kameleo 5.0.1.1Kameleo 5.0.1.2Kameleo 5.0.1.3Kameleo 5.0.1.4Kameleo 5.0.1.5Kameleo 5.0.1.6Kameleo 5.0.1.7Kameleo 5.0.1.8Kameleo 5.0.1.9Kameleo 5.0.1.10Kameleo 5.0.1.11Kameleo 5.0.1.12Kameleo 5.0.1.13Kameleo 5.0.1.14Kameleo 5.0.1.15Kameleo 5.0.1.16Kameleo 5.0.1.17Kameleo 5.0.1.18Kameleo 5.0.1.19Kameleo 5.0.1.20Kameleo 5.0.1.21Kameleo 5.0.1.22Kameleo 5.0.1.23Kameleo 5.0.1.24Kameleo 5.0.1.25Kameleo 5.0.1.26Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116283Medium· 4.3Kameleo Local API profiles information disclosure
CVE-2026-116284Medium· 4.3Kameleo Local API user-info information disclosure
CVE-2026-116282Medium· 4.3Kameleo Cookie Controller w.cs CookieController.ListCookies information disclosure
CVE-2026-116280Medium· 5.5Kameleo Proxy Validation f.cs InternalController.TestProxy server-side request forgery
CVE-2013-10077Medium· 5.3OctoPrint API Key settings.py getSettings information disclosure
CVE-2025-14198Medium· 5.3A vulnerability was detected in Verysync 微力同步 2.21.3