Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-105868 | high | 7.1 | No | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34,... | 2026-10-15 |
| CVE-2026-105848 | critical | 9.6 | No | Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions before 3.90.0 and canary version... | 2026-10-15 |
| CVE-2026-105849 | high | 8.3 | No | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-... | 2026-10-15 |
| CVE-2026-105850 | high | 8.2 | No | Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary vers... | 2026-10-15 |
| CVE-2026-105851 | high | 8.1 | No | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-... | 2026-10-15 |
| CVE-2026-105852 | high | 7.5 | No | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34,... | 2026-10-15 |
| CVE-2026-105853 | medium | 6.5 | No | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-... | 2026-10-15 |
| CVE-2026-105854 | high | 7.5 | No | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-... | 2026-10-15 |
| CVE-2026-105855 | high | 7.1 | No | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34,... | 2026-10-15 |
| CVE-2026-105856 | high | 8.3 | No | Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create... | 2026-10-15 |
| CVE-2026-105857 | critical | 10.0 | No | Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary v... | 2026-10-15 |
| CVE-2026-105858 | high | 8.1 | No | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34,... | 2026-10-15 |
| CVE-2026-105859 | critical | 9.8 | No | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34,... | 2026-10-15 |
| CVE-2026-105860 | high | 7.1 | No | Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary v... | 2026-10-15 |
| CVE-2026-105861 | high | 8.2 | No | Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-... | 2026-10-15 |
| CVE-2026-105862 | high | 8.7 | No | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34,... | 2026-10-15 |
| CVE-2026-105863 | critical | 9.4 | No | Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that... | 2026-10-15 |
| CVE-2026-105864 | medium | 4.3 | No | Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary v... | 2026-10-15 |
| CVE-2026-105865 | high | 8.1 | No | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34,... | 2026-10-15 |
| CVE-2026-105866 | high | 7.5 | No | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34,... | 2026-10-15 |