CVE-2026-30460
8.8 highEPSS 0.8%
High (8.8) in thedaylightstudio fuel cms. EPSS 0.8% chance of exploitation in the next 30 days.
Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module.
Severity
CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- thedaylightstudio:fuel_cms
References
Check your stackJSON