CVE-2026-116282

CVSS 5.3 (medium) · published 2026-10-26

A security flaw has been discovered in Kameleo up to 5.3.1. Affected by this issue is the function CookieController.ListCookies of the file client-engine-application/w.cs of the component Cookie Controller. The manipulation of the argument guid results in information disclosure. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness: CWE-200, CWE-284

Source: NVD CVE-2026-116282

References

• https://drive.google.com/file/d/1BafyXWX1cUGF6XdI_P1flM1uNyyzHF-w/view?usp=drive_link
• https://vuldb.com/cve/CVE-2026-116282
• https://vuldb.com/submit/1011321
• https://vuldb.com/vuln/426307
• https://vuldb.com/vuln/426307/cti

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.