CVE-2026-116009 - Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action
CVE ID :CVE-2026-116009 Published : Oct. 24, 2026, 11:40 a.m. | 38 minutes ago Description :Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to write arbitrary files by supplying ../ sequences in the name parameter. Attackers...