PT-2026-123332

CVE-2026-116281

·

Published

2026-10-26

·

Updated

2026-10-26

Description by

CVSS 2.0
1.7
Low
MetricsAV:L/AC:L/Au:S/C:P/I:N/A:N
A vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability is the function ListProfiles of the file client-engine-application/t.cs of the component Profile Controller. The manipulation leads to information disclosure. The attack can only be performed from a local environment. Upgrading to version 5.2.0 addresses this issue. Upgrading the affected component is recommended.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-284: Improper Access Control
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Related identifiers
CVE-2026-116281
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com