https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:05:36 +0000 https://cve.radiocsirt.org/vuln/cve-2026-56721 <p><strong>Affected:</strong> owen2345 CamaleonCMS</p> <p>CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference (IDOR) that allows authenticated low-privileged attackers to overwrite any user&#39;s credentials by exploiting a parameter confusion flaw between the authorization filter and action body in the UsersController. Attackers can send a PATCH request to the updated_ajax endpoint setting params[:id] to their own user ID to pass the self-authorization check while simultaneously setting params[:user_id] to a victim&#39;s ID, causing the controller to load and mutate the victim&#39;s account, including overwriting administrator passwords to achieve full site takeover.</p> <p><strong>Affected:</strong> owen2345 CamaleonCMS</p> <p>CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference (IDOR) that allows authenticated low-privileged attackers to overwrite any user&#39;s credentials by exploiting a parameter confusion flaw between the authorization filter and action body in the UsersController. Attackers can send a PATCH request to the updated_ajax endpoint setting params[:id] to their own user ID to pass the self-authorization check while simultaneously setting params[:user_id] to a victim&#39;s ID, causing the controller to load and mutate the victim&#39;s account, including overwriting administrator passwords to achieve full site takeover.</p> https://cve.radiocsirt.org/vuln/cve-2026-56721