CVE-2026-56721

creationtimestamp| type| source ---|---|--- 2026-08-11 17:02:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mst3rb7hdr2h 2026-08-12 12:04:37+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msv3m4b5ve2h 2026-08-12 12:04:38+00:00| seen|...

CVE-2026-56721

CVE-2026-56721 affects CamaleonCMS

CVE-2026-56721 CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersController

CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference IDOR that allows authenticated low-privileged attackers to overwrite any user's credentials by exploiting a parameter confusion flaw between the authorization filter and action...