Live › vulnerability › CVE-2026-116284
Go to dashboardKameleo up to version 5.3.1 exposes information through the /general/user-info path of its Local API. A remote attacker can read data from that endpoint without the sources describing what the data contains.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 16:02 UTC. All times on this page are UTC.
Teams running Kameleo 5.3.1 or earlier with the Local API reachable over the network. The sources do not say whether the endpoint is enabled by default or what data it returns.
No product ranges from the sources yet.
5.3.1 or earlierEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects unknown code of the file /general/user-info of the component Local API. Such manipulation leads to information disclosure. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-116284")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.