CVE-2026-78850

An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component...

CVE-2026-78850

Matomo v.5.11.2 is vulnerable to a Blind Server-Side Request Forgery (SSRF) (CWE-918) in the SiteContentDetector / SitesManager component. The issue arises because the application allows an authenticated site administrator to configure a main_url that points to an internal address. The system per...

CVE-2026-78850

An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component...

EUVD-2026-102185

An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component...