CVE-2026-66748

Camaleon CMS versions 2.1.1–2.9.1 are affected by an authenticated RCE via the select_eval custom field. Users with custom_fields manage permission can supply a Ruby expression that is stored in the field options and evaluated via instance_eval in an ERB view when a post edit page is rendered, en...