Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-11779
Not yet scoredAwaiting CVSS assessment
Description
An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation.
payloadcms/payload
GitHubPayload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for building powerful applications.
GitHubPayload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for building powerful applications.NVD