kameleo-io CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM kameleo-io CVE published 2026-10-26

CVE-2026-116281

A vulnerability was identified in Kameleo up to 5.0.1.26, affecting the ListProfiles function in the Profile Controller, leading to information disclosure. The attack requires local access and can be addressed by upgrading to version 5.2.0. This issue has a CVSS score of 4.8 and is considered MEDIUM severity. Defenders should assess exposure and prioritize upgrading to version 5.2.0. The vulnerability can [truncated]