CVE-2026-116009

Name of the Vulnerable Software and Affected Versions Camaleon CMS versions prior to 2.9.3

Description A path traversal issue exists where users with media permissions can write arbitrary files by using ../ sequences in the name parameter. An attacker can utilize a base64 data: URI via the crop url media action to write an ERB (Embedded Ruby) template—a server-side templating system—into a theme's views directory, leading to code execution when the template is rendered.

Recommendations Update Camaleon CMS to version 2.9.3 or later.