Matomo CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Matomo CVE published 2026-10-15

CVE-2026-78850

CVE-2026-78850 is a vulnerability in Matomo v.5.11.2 that allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component. The CVE record was published on 2026-10-15T00:00:00.000Z and has not been modified since then. The NVD entry is currently unknown. This vulnerability affects Matomo installations, particularly those using v.5.11.2, and defenders should ass [truncated]