CVE-2026-30460

Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module

High · published April 7, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
59.2
In the wild
Unconfirmed
What it is

Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00895 · 59.2th percentile
Published
2026-04-07T00:00Z
EPSS history
Timeline
  • 07 APR 00:00Z
    Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module
    cvelistv5