high8.3
CVE-2026-30461
Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the /controllers/Installer.php and the …
Impact
Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the /controllers/Installer.php and the function add_git_submodule.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thedaylightstudio | Fuel Cms | Version 1.5.2 |