CVE-2026-105851 | payloadcms Payload up to 3.89.x/4.0.0-canary.33 Duplicate Operation disableDuplicate privileges management

SecurityVulns
Yanac

A vulnerability, which was classified as critical, was found in payloadcms Payload up to 3.89.x/4.0.0-canary.33. The affected element is an unknown function of the component Duplicate Operation. Such manipulation of the argument disableDuplicate leads to improper privilege management.

This vulnerability is uniquely identified as CVE-2026-105851. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More