Vulnerability Details CVE-2026-30461
Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the /controllers/Installer.php and the function add_git_submodule.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.5%
CVSS Severity
CVSS v3 Score 8.3
References
Products affected by CVE-2026-30461
-
cpe:2.3:a:thedaylightstudio:fuel_cms:1.5.2