CVE-2026-105859 | Payload CMS up to 3.89.x access control

A vulnerability described as critical has been identified in Payload CMS Payload up to 3.89.x. Impacted is an unknown function. The manipulation results in improper access controls.

This vulnerability is reported as CVE-2026-105859. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More