Live › vulnerability › CVE-2026-116283
Go to dashboardKameleo, a browser profile manager, has a weakness in the /profiles path of its Local API that lets a remote attacker obtain information. The sources do not say what data is exposed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 14:30 UTC. All times on this page are UTC.
Installations of Kameleo up to and including 5.0.1.26 that expose the Local API. The sources do not say whether the flaw is reachable without authentication or on default configuration, so unknown. Teams on 5.2.0 or later are not affected.
No product ranges from the sources yet.
5.0.1.26 in the application's About screen or install directory5.2.0 or later, per the NVD descriptionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the component Local API. This manipulation causes information disclosure. The attack is possible to be carried out remotely. Upgrading to version 5.2.0 is able to mitigate this issue. Upgrading the affected component is advised.
This page as .md · .json · in your agent: get_signal("CVE-2026-116283")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.