A vulnerability, which was classified as critical, has been found in Daylight Studio FuelCMS 1.5.2. Affected is an unknown function of the component Password Reset Handler. Performing a manipulation results in weak password recovery.

This vulnerability is identified as CVE-2026-30458. The attack can be initiated remotely. There is not any exploit available.