{"schema":"threatline.record/2","record":{"id":"CVE-2026-116281","aliases":[],"summary":"Kameleo Profile Controller t.cs ListProfiles information disclosure","details":"A vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability is the function ListProfiles of the file client-engine-application/t.cs of the component Profile Controller. The manipulation leads to information disclosure. The attack can only be performed from a local environment. Upgrading to version 5.2.0 addresses this issue. Upgrading the affected component is recommended.","categories":["Unclassified"],"product":"Kameleo","vendor":"n/a","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-116281","source_modified_at":"2026-10-26T13:00:10.760Z","fetched_at":"2026-10-26T19:10:57.178988Z","product":"Kameleo","vendor":"n/a","versions":[{"version":"5.0.1.0","status":"affected"},{"version":"5.0.1.1","status":"affected"},{"version":"5.0.1.2","status":"affected"},{"version":"5.0.1.3","status":"affected"},{"version":"5.0.1.4","status":"affected"},{"version":"5.0.1.5","status":"affected"},{"version":"5.0.1.6","status":"affected"},{"version":"5.0.1.7","status":"affected"},{"version":"5.0.1.8","status":"affected"},{"version":"5.0.1.9","status":"affected"},{"version":"5.0.1.10","status":"affected"},{"version":"5.0.1.11","status":"affected"},{"version":"5.0.1.12","status":"affected"},{"version":"5.0.1.13","status":"affected"},{"version":"5.0.1.14","status":"affected"},{"version":"5.0.1.15","status":"affected"},{"version":"5.0.1.16","status":"affected"},{"version":"5.0.1.17","status":"affected"},{"version":"5.0.1.18","status":"affected"},{"version":"5.0.1.19","status":"affected"},{"version":"5.0.1.20","status":"affected"},{"version":"5.0.1.21","status":"affected"},{"version":"5.0.1.22","status":"affected"},{"version":"5.0.1.23","status":"affected"},{"version":"5.0.1.24","status":"affected"},{"version":"5.0.1.25","status":"affected"},{"version":"5.0.1.26","status":"affected"},{"version":"5.2.0","status":"unaffected"}],"defaultStatus":null}],"fixed_versions":[],"cvss":4.8,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-26T13:00:10.760Z","modified_at":"2026-10-26T13:00:10.760Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-116281","fetched_at":"2026-10-26T19:10:57.178988Z","source_modified_at":"2026-10-26T13:00:10.760Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://vuldb.com/vuln/426306","tags":["vdb-entry","technical-description"]},{"source":"CVE List","url":"https://vuldb.com/vuln/426306/cti","tags":["signature","permissions-required"]},{"source":"CVE List","url":"https://vuldb.com/cve/CVE-2026-116281","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://vuldb.com/submit/1011319","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://drive.google.com/file/d/1ZuDXJSM1SQDNZogKq8oEQ6qtDI1TkGN7/view?usp=drive_link","tags":["broken-link"]},{"source":"CVE List","url":"https://github.com/kameleo-io/kameleo/releases/tag/5.2.0","tags":["patch"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-26T13:00:10.760Z","content_hash":"d6b570562402063115c8de1ff54581bfcfa78f55659af96d73e2ff35b3692059"}}