Medium severityNVD Advisory· Published Jun 12, 2026· Updated Jun 15, 2026

CVE-2026-10715

Description

Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. A low-privileged authenticated user can send an arbitrary post_id to POST /admin/post_type/<POST_TYPE_ID>/drafts and overwrite the draft associated with another user's post.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Owen2345/Camaleon CMSreferences
Camaleon CMS/Camaleon CMSllm-create
Range: =2.9.2

Patches

Vulnerability mechanics

References

fluidattacks.com/es/advisories/billienvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000