Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Apr 7, 2026 · NIST NVD

   Detected

   Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module.

2. Jul 5, 2026 · NIST NVD

   Updated

   Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module.

Affected

• cpe thedaylightstudio/fuel cms1.5.2

Sources

• CVE.orgVulnerability recordCVE-2026-30460

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-30460

  Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module.

  nvd.nist.gov

References

• Product · github.com
• Exploit · pentest-tools.com