CVE-2026-116280 — Kameleo Proxy Validation InternalController.TestProxy server-side request forgery

A vulnerability affects Kameleo versions up to 5.0.1.26 in the InternalController.TestProxy function of client-engine-application/f.cs in the Proxy Validation component. Manipulating the host/port argument can lead to server-side request forgery (SSRF). The attack may be launched remotely.