CVE-2026-30460

High · 8.8

CVSS

8.8

EPSS

0.9%

Published

Apr 7, 2026

CISA due date

—

The record

Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module.

Ecosystem	Package	Introduced	Fixed