CVE-2026-116284Medium· 4.3▾ SunlitA security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects unknown code of the file /general/user-info of the component Local API. Such manipulation leads to information disclosure. The attack may be pe…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects unknown code of the file /general/user-info of the component Local API. Such manipulation leads to information disclosure. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
Kameleo 5.3.0Kameleo 5.3.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116281Low· 3.3Kameleo Profile Controller t.cs ListProfiles information disclosure
CVE-2026-116282Medium· 4.3Kameleo Cookie Controller w.cs CookieController.ListCookies information disclosure
CVE-2026-116283Medium· 4.3Kameleo Local API profiles information disclosure
CVE-2026-116280Medium· 5.5Kameleo Proxy Validation f.cs InternalController.TestProxy server-side request forgery
CVE-2013-10077Medium· 5.3OctoPrint API Key settings.py getSettings information disclosure
CVE-2025-14198Medium· 5.3A vulnerability was detected in Verysync 微力同步 2.21.3