CVE-2026-105804 | Payloadcms Payload prior 3.90.0/4.0.0-canary.34 weak password hash

October 6, 2026 Yanac

A vulnerability was found in Payloadcms Payload. It has been declared as problematic. The impacted element is an unknown function. Executing a manipulation can lead to password hash with insufficient computational effort.

This vulnerability is tracked as CVE-2026-105804. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More