CVE-2026-116283Medium· 4.3▾ SunlitA weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the component Local API. This manipulation causes information disclosure. The attack is possible to be carried out remotely. …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the component Local API. This manipulation causes information disclosure. The attack is possible to be carried out remotely. Upgrading to version 5.2.0 is able to mitigate this issue. Upgrading the affected component is advised.
Kameleo 5.0.1.0Kameleo 5.0.1.1Kameleo 5.0.1.2Kameleo 5.0.1.3Kameleo 5.0.1.4Kameleo 5.0.1.5Kameleo 5.0.1.6Kameleo 5.0.1.7Kameleo 5.0.1.8Kameleo 5.0.1.9Kameleo 5.0.1.10Kameleo 5.0.1.11Kameleo 5.0.1.12Kameleo 5.0.1.13Kameleo 5.0.1.14Kameleo 5.0.1.15Kameleo 5.0.1.16Kameleo 5.0.1.17Kameleo 5.0.1.18Kameleo 5.0.1.19Kameleo 5.0.1.20Kameleo 5.0.1.21Kameleo 5.0.1.22Kameleo 5.0.1.23Kameleo 5.0.1.24Kameleo 5.0.1.25Kameleo 5.0.1.26Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116281Low· 3.3Kameleo Profile Controller t.cs ListProfiles information disclosure
CVE-2026-116284Medium· 4.3Kameleo Local API user-info information disclosure
CVE-2026-116282Medium· 4.3Kameleo Cookie Controller w.cs CookieController.ListCookies information disclosure
CVE-2026-116280Medium· 5.5Kameleo Proxy Validation f.cs InternalController.TestProxy server-side request forgery
CVE-2013-10077Medium· 5.3OctoPrint API Key settings.py getSettings information disclosure
CVE-2025-14198Medium· 5.3A vulnerability was detected in Verysync 微力同步 2.21.3