CVE-2026-30458 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset tokens via a mail splitting attack.
Critical CVSS: 9.1

CVE-2026-30458

An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset tokens via a mail splitting attack.
Vendor
Thedaylightstudio
Product
Fuel Cms
CWE
CWE-620
Yayın Tarihi
2026-03-26 19:17:00
Güncelleme
2026-03-30 14:11:49
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-620 Fuel Cms CRITICAL Thedaylightstudio 2026

Referanslar

http://daylight.com http://fuelcms.com https://github.com/daylightstudio/FUEL-CMS https://pentest-tools.com/PTT-2025-025-Account-Takeover-via-Email-Array.pdf