p PatchFirst

CVE-2026-78850

CVE-2026-78850

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component

CVSS 5.0 · Medium · EPSS 0.3%

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • matomo Debian:13

    Versions
    • 5.3.1+dfsg-1
    • 5.5.1+dfsg-1
    • 5.5.1+dfsg-2
    • 5.5.1+dfsg-3
    • 5.8.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • matomo Ubuntu:26.10

    Versions
    • 5.5.1+dfsg-3
    • 5.8.0-1
    • 5.8.0-1ubuntu1
    • 5.8.0-1ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • matomo Ubuntu:26.04:LTS

    Versions
    • 5.3.1+dfsg-1
    • 5.5.1+dfsg-1
    • 5.5.1+dfsg-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →