A vulnerability was found in owen2345 CamaleonCMS up to 2.9.2. It has been rated as problematic. This impacts an unknown function of the component Admin Users Controller. The manipulation of the argument user ID leads to missing authentication.
This vulnerability is traded as CVE-2026-56720. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to apply a patch to fix this issue.
