EUVD-2026-88630

A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleoncms/admin/mediacontroller.rb of the component Media Crop Handler. This manipulation of the argument savedavatar causes authorization bypass. The attack may be initiated...

CVE-2026-102261

A flaw exists in owen2345 Camaleon CMS up to version 2.9.2 within the Media Crop Handler component. Specifically, the crop function in app/controllers/camaleon_cms/admin/media_controller.rb is vulnerable to an authorization bypass caused by the manipulation of the saved_avatar argument. This vuln...