CVE-2026-30459 Details
Description
An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message.
A vulnerability in the password reset feature of Daylight Studio FuelCMS version 1.5.2 allows unauthenticated attackers to steal password reset tokens from users. This is achieved by manipulating the 'Host' HTTP header to redirect the token to an attacker-controlled server. The attacker must find a valid user email and wait for the victim to click the malicious link in the password reset email.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/daylightstudio/FUEL-CMS/blob/master/fuel/modules/fuel/controllers/Login.php | [email protected] | Product |
| https://pentest-tools.com/PTT-2025-029-Password-Reset-Poisoning-via-Host-Header.pdf | [email protected] | ExploitThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-640 | Weak Password Recovery Mechanism for Forgotten Password | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| thedaylightstudio fuel cms | 1.5.2 |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 5, 2026 | CVE Modified | [email protected] |
| Jul 5, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Apr 23, 2026 | Initial Analysis | [email protected] |
| Apr 16, 2026 | CVE Modified | CISA-ADP |
| Apr 16, 2026 | New CVE Received | [email protected] |