camaleon_cms vulnerabilities

CVEs whose affected-version data names the camaleon_cms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-86100Medium· 6.4

2w ago

Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote files in the Upload from URL media feature

Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote files in the Upload from URL media feature. Authenticated attackers can supply URLs that pass initial validation but redirect to internal ne…

▾ Sunlitowen2345 · camaleon_cmsEPSS 0.19%via NVD