CVE-2020-26167

—

CVSS 3.1

9.8 critical

EPSS

3%p88

Published

Nov 4, 2020 (Nov 4, 2020)

Modified

Jun 17, 2026

Description

In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one.

Vendors: thedaylightstudio
Products: fuel cms
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.4%)

In the news0 stories

No ingested article mentions this CVE yet.