CVE-2026-78850: Matomo Matomo vulnerability
Published Oct 15, 2026
·Updated
An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component
Affected Software
1 affected component
Matomo Matomo=5.11.2
Event History
Oct 15, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The issue is described as remotely exploitable, so it does not indicate that local access is required. The available data does not specify whether authentication or particular application permissions are needed.
2
Which Matomo release is identified as affected?
The issue identifies Matomo version 5.11.2. No fixed version or affected version range is provided.
3
What information could be exposed?
The reported impact is disclosure of sensitive information through the SiteContentDetector / SitesManager component. The available information does not identify the specific data that may be disclosed.