CVE-2026-56720
Received Received - Intake

Missing Authorization in CamaleonCMS Exposes User Data

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: VulnCheck

Description
CamaleonCMS version 2.9.2 and earlier contains a missing authorization vulnerability in the admin users controller that allows any authenticated user to access any other user's profile data by supplying an arbitrary user ID parameter. Attackers can send a GET request to the admin profile endpoint with an enumerable sequential integer user ID to disclose profile information of any user, including administrators, due to the profile action being excluded from the role validation filter with no compensating ownership check.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-56720
EUVD
EUVD-2026-56232

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
owen2345 camaleon_cms to 2.9.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an Insecure Direct Object Reference (IDOR) vulnerability in CamaleonCMS versions 2.9.2 and earlier. It allows any authenticated user to access other users' profile data by manipulating the user_id parameter in the admin profile endpoint. The vulnerability exists because the profile action bypasses role validation checks without performing an ownership verification.

Detection Guidance

To detect this vulnerability, monitor GET requests to the admin profile endpoint (/admin/profile) with varying user_id parameters. Check for sequential integer IDs or unauthorized access attempts. Use tools like curl to test: curl -u username:password http://target.com/admin/profile?user_id=1, curl -u username:password http://target.com/admin/profile?user_id=2, etc. Look for 200 OK responses with sensitive user data.

Impact Analysis

An attacker could exploit this to view sensitive profile information of any user, including administrators. Exposed data may include email addresses, usernames, roles, and custom fields. This could lead to further attacks like phishing, privilege escalation, or unauthorized access to protected resources.

Compliance Impact

This vulnerability likely violates data protection requirements under GDPR and HIPAA by enabling unauthorized access to personal and sensitive user data. It could result in non-compliance with privacy principles, leading to legal penalties, reputational damage, and mandatory breach notifications.

Mitigation Strategies

Immediately update CamaleonCMS to version 2.9.3 or later. If updating is not possible, apply the patch from the GitHub commit ae10da7cfce902a8552927c57b0a562fb1676040. Restrict access to the /admin/profile endpoint and enforce strict role-based authorization checks. Review logs for unauthorized access attempts and disable user enumeration by ensuring non-existent user IDs return consistent 302 redirects.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-56720. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart