CVE-2026-116280 | Kameleo up to 5.0.1.26 Proxy Validation f.cs InternalController.TestProxy host/port server-side request forgery

October 25, 2026 Yanac

A vulnerability was found in Kameleo up to 5.0.1.26 and classified as problematic. Affected is the function InternalController.TestProxy of the file client-engine-application/f.cs of the component Proxy Validation. Executing a manipulation of the argument host/port can lead to server-side request forgery.

The identification of this vulnerability is CVE-2026-116280. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.

The route has been removed and replaced with /general/test-proxy in 5.2.0.VulDB Recent EntriesRead More