Critical severity9.8NVD Advisory· Published Nov 4, 2020· Updated Jun 17, 2026

CVE-2020-26167

Description

In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Thedaylightstudio/Fuel CMS
cpe:2.3:a:thedaylightstudio:fuel_cms:*:*:*:*:*:*:*:*
Range: <=1.4.12
FUEL CMS/FUEL CMSdescription
Fuel CMS/Fuel CMSllm-fuzzy
Range: <=11.4.12

Patches

Vulnerability mechanics

References

excellium-services.com/cert-xlm-advisory/cve-2020-26167/nvdThird Party Advisory
thedaylightstudio.comnvdVendor Advisory
www.getfuelcms.comnvdProductVendor Advisory
cds.thalesgroup.com/en/tcs-cert/CVE-2020-26167nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000