PT-2026-123332

CVE-2026-116281

Published

2026-10-26

Updated

2026-10-26

Description by

CVSS 4.0

4.8

Medium

MetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X

Name of the Vulnerable Software and Affected Versions Kameleo versions prior to 5.2.0

Description An issue in the Profile Controller component allows for information disclosure. The flaw exists within the ListProfiles() function located in the client-engine-application/t.cs file. This attack requires local environment access to be executed.

Recommendations Update to version 5.2.0.

Exploitability

Exploit

Fix

Impacts

Researchers

Notwo1F

Researchersongwu

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control