CVE-2026-59965 | jhb.software Payload 0.7.0 Alt Text Endpoint generateAltText.ts req.payload.findByID/req.payload.update id/collection/locale/update authorization

A vulnerability classified as critical has been found in jhb.software Payload 0.7.0. Affected by this vulnerability is the function req.payload.findByID/req.payload.update of the file alt-text/src/endpoints/generateAltText.ts of the component Alt Text Endpoint. Performing a manipulation of the argument id/collection/locale/update results in incorrect authorization.

This vulnerability was named CVE-2026-59965. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More