VulnerableCode Advisory Details - gems/camaleon_cms/CVE-2026-10715

Staging Environment: Content and features may be unstable or change without notice.

Advisory details: ruby_advisory_db / gems/camaleon_cms/CVE-2026-10715

Essentials
Severities (1)
References (1)
Exploits (0)
EPSS
Severity details (0)
Patches: (0)

Advisory ID	ruby_advisory_db/gems/camaleon_cms/CVE-2026-10715
Aliases	CVE-2026-10715 GHSA-vg43-9r8m-q2cc
Summary	Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. A low-privileged authenticated user can send an arbitrary post_id to POST /admin/post_type/<POST_TYPE_ID>/drafts and overwrite the draft associated with another user's post.
Status	Published
Exploitability	0.5
Weighted Severity	0.0
Risk
Affected and Fixed Packages	Package Details
Introduced and Fixed Package Commit Patches	Package Commit Patches Details

Weaknesses (0)

There are no known CWE.

System	Score	Found at
cvssv4	5.1

Reference id	Reference type	URL
CVE-2026-10715		https://nvd.nist.gov/vuln/detail/CVE-2026-10715

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.