CVE-2026-116009 | owen2345 Camaleon CMS up to 2.9.2 Media Action crop_url name path traversal

October 24, 2026 Yanac

A vulnerability classified as critical has been found in owen2345 Camaleon CMS up to 2.9.2. Affected is the function crop_url of the component Media Action. Performing a manipulation of the argument Name results in path traversal.

This vulnerability is reported as CVE-2026-116009. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More