CVE-2026-116284

CVSS 5.3 (medium) · published 2026-10-26

A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects unknown code of the file /general/user-info of the component Local API. Such manipulation leads to information disclosure. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness: CWE-200, CWE-284

Source: NVD CVE-2026-116284

References

• https://drive.google.com/file/d/1lKWdsneSk1a4XZI0FW0Avzso3Oi8ajCS/view?usp=drive_link
• https://vuldb.com/cve/CVE-2026-116284
• https://vuldb.com/submit/1011370
• https://vuldb.com/vuln/426309
• https://vuldb.com/vuln/426309/cti
• https://vuldb.com/submit/1011370

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.