PT-2026-123331

CVE-2026-116280

Published

2026-10-26

Updated

2026-10-26

Description by

CVSS 2.0

6.5

Medium

MetricsAV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Kameleo versions prior to 5.2.0

Description An issue exists in the Proxy Validation component within the InternalController.TestProxy() function of the client-engine-application/f.cs file. A remote attacker can manipulate the host/port argument to perform server-side request forgery, a technique where the attacker induces the server to make requests to an unintended location.

Recommendations Upgrade to version 5.2.0.

Exploitability

Exploit

Fix

Impacts

Researchers

Notwo1F

Researchersongwu

Vendors

Affected products

Weakness enumeration

CWE-918: Server-Side Request Forgery (SSRF)