CVE-2026-116284

EUVD-2026-109931
A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects unknown code of the file /general/user-info of the component Local API. Such manipulation leads to information disclosure. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 25.52%
Common Weakness Enumeration
References
https://drive.google.com/file/d/1lKWdsneSk1a4XZI0FW0Avzso3Oi8ajCS/view?usp=drive_link
https://vuldb.com/cve/CVE-2026-116284
https://vuldb.com/submit/1011370
https://vuldb.com/vuln/426309
https://vuldb.com/vuln/426309/cti