CVE-2026-11779

Summary

An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation.

Affected Software

Weaknesses

• CWE-307: CWE-307 Improper Restriction of Excessive Authentication Attempts

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://fluidattacks.com/es/advisories/stitches

References

• https://fluidattacks.com/es/advisories/stitches
• https://github.com/payloadcms/payload

• ←Previous
• Next→