https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:09:17.250306+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-336524 EUVD-2026-336524 2026-10-05T17:09:17.298149+00:00 EUVD-2026-336524 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1776 fkie_cve-2026-1776 2026-10-05T17:09:17.298189+00:00

Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, contain a path traversal vulnerability in the AWS S3 uploader implementation that allows authenticated users to read arbitrary files from the web server’s filesystem. The issue occurs in the download_private_file functionality when the application is configured to use the CamaleonCmsAwsUploader backend. Unlike the local uploader implementation, the AWS uploader does not validate file paths with valid_folder_path?, allowing directory traversal sequences to be supplied via the file parameter. As a result, any authenticated user, including low-privileged registered users, can access sensitive files such as /etc/passwd. This issue represents a bypass of the incomplete fix for CVE-2024-46987 and affects deployments using the AWS S3 storage backend.

 https://cve.radiocsirt.org/vuln/ghsa-jw5g-f64p-6x78 GHSA-jw5g-f64p-6x78 — Camaleon CMS vulnerable to Path Traversal through AWS S3 uploader implementation 2026-10-05T17:09:17.298228+00:00

Affected: RubyGems: camaleon_cms

Camaleon CMS versions 2.4.5.0 through 2.9.1, prior to commit f54a77e, contain a path traversal vulnerability in the AWS S3 uploader implementation that allows authenticated users to read arbitrary files from the web server’s filesystem. The issue occurs in the download_private_file functionality when the application is configured to use the CamaleonCmsAwsUploader backend. Unlike the local uploader implementation, the AWS uploader does not validate file paths with valid_folder_path?, allowing directory traversal sequences to be supplied via the file parameter. As a result, any authenticated user, including low-privileged registered users, can access sensitive files such as /etc/passwd. This issue represents a bypass of the incomplete fix for CVE-2024-46987 and affects deployments using the AWS S3 storage backend.