CVE-2026-86100 | owen2345 Camaleon CMS up to 2.9.1 Upload from URL media feature server-side request forgery

September 5, 2026 Yanac

A vulnerability marked as critical has been reported in owen2345 Camaleon CMS up to 2.9.1. This vulnerability affects unknown code of the component Upload from URL media feature. This manipulation causes server-side request forgery.

This vulnerability appears as CVE-2026-86100. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More