CVE-2026-116283
Full vulnerability record from the local CVENow database.
Description
A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the component Local API. This manipulation causes information disclosure. The attack is possible to be carried out remotely. Upgrading to version 5.2.0 is able to mitigate this issue. Upgrading the affected component is advised.
Severity
MEDIUM
CVSS score
5.3
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2026-10-26 14:16:36.860000
Last modified
2026-10-26 18:35:08.450000
View original CVE JSON
{
"id": "CVE-2026-116283",
"sourceIdentifier": "[email protected]",
"published": "2026-10-26T14:16:36.860",
"lastModified": "2026-10-26T18:35:08.450",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the component Local API. This manipulation causes information disclosure. The attack is possible to be carried out remotely. Upgrading to version 5.2.0 is able to mitigate this issue. Upgrading the affected component is advised."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "n/a",
"product": "Kameleo",
"cpes": [
"cpe:2.3:a:kameleo:kameleo:*:*:*:*:*:*:*:*"
],
"modules": [
"Local API"
],
"versions": [
{
"version": "5.0.1.0",
"status": "affected"
},
{
"version": "5.0.1.1",
"status": "affected"
},
{
"version": "5.0.1.2",
"status": "affected"
},
{
"version": "5.0.1.3",
"status": "affected"
},
{
"version": "5.0.1.4",
"status": "affected"
},
{
"version": "5.0.1.5",
"status": "affected"
},
{
"version": "5.0.1.6",
"status": "affected"
},
{
"version": "5.0.1.7",
"status": "affected"
},
{
"version": "5.0.1.8",
"status": "affected"
},
{
"version": "5.0.1.9",
"status": "affected"
},
{
"version": "5.0.1.10",
"status": "affected"
},
{
"version": "5.0.1.11",
"status": "affected"
},
{
"version": "5.0.1.12",
"status": "affected"
},
{
"version": "5.0.1.13",
"status": "affected"
},
{
"version": "5.0.1.14",
"status": "affected"
},
{
"version": "5.0.1.15",
"status": "affected"
},
{
"version": "5.0.1.16",
"status": "affected"
},
{
"version": "5.0.1.17",
"status": "affected"
},
{
"version": "5.0.1.18",
"status": "affected"
},
{
"version": "5.0.1.19",
"status": "affected"
},
{
"version": "5.0.1.20",
"status": "affected"
},
{
"version": "5.0.1.21",
"status": "affected"
},
{
"version": "5.0.1.22",
"status": "affected"
},
{
"version": "5.0.1.23",
"status": "affected"
},
{
"version": "5.0.1.24",
"status": "affected"
},
{
"version": "5.0.1.25",
"status": "affected"
},
{
"version": "5.0.1.26",
"status": "affected"
},
{
"version": "5.2.0",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"baseScore": 5.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-200"
},
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"references": [
{
"url": "https://drive.google.com/file/d/1ZuDXJSM1SQDNZogKq8oEQ6qtDI1TkGN7/view?usp=drive_link",
"source": "[email protected]"
},
{
"url": "https://github.com/kameleo-io/kameleo/releases/tag/5.2.0",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/cve/CVE-2026-116283",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/submit/1011369",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/426308",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/426308/cti",
"source": "[email protected]"
}
]
}