Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 22:34:38 +0000 CVE-2026-10715 — Camaleon CMS 2.9.2 - Improper authorization in draft autosave endpoint https://cve.radiocsirt.org/vuln/cve-2026-10715 <p><strong>Affected:</strong> Camaleon CMS</p> <p>Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. A low-privileged authenticated user can send an arbitrary post_id to POST /admin/post_type/&lt;POST_TYPE_ID&gt;/drafts and overwrite the draft associated with another user&#39;s post.</p> <p><strong>Affected:</strong> Camaleon CMS</p> <p>Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. A low-privileged authenticated user can send an arbitrary post_id to POST /admin/post_type/&lt;POST_TYPE_ID&gt;/drafts and overwrite the draft associated with another user&#39;s post.</p> https://cve.radiocsirt.org/vuln/cve-2026-10715