Payload CMS default account-unlock access allows authenticated users to reset other accounts' lockouts

Description

References

• nvd.nist.gov/vuln/detail/CVE-2026-11779 · ADVISORY
• fluidattacks.com/es/advisories/stitches · WEB
• payloadcms/payload · PACKAGE

payload의 다른 취약점

• CVE-2026-105868높음 7.1Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, …
• CVE-2026-105866높음 7.5Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, …
• CVE-2026-105865높음 8.1Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, …
• CVE-2026-105863심각 9.4Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that …
• CVE-2026-105862높음 8.7Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, …