Description
An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset tokens via a mail splitting attack.
Critical · 9.1
CVE-2026-30458
EUVD-2026-16303GHSA-8vgv-ffv5-269j
An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset tokens via a mail splitting attack.
Published Mar 26, 2026 · Updated Jul 5, 2026 · Assigned by mitre