@payloadcms PayloadCMS vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting @payloadcms PayloadCMS: 1 record(s), with affected versions and fixes.

CVE-2026-11779 Medium · 5.3 CWE-307 Jun 26, 2026

PayloadCMS 3.84.1 - Authenticated account lockout bypass through default unlock access

An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation.