~/products/payloadcms/plugin-import-export

pipeline liveDigest Docs

Payloadcms Plugin-Import-Export vulnerabilities

1 known vulnerability affecting payloadcms/plugin-import-export.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2026-105844P2CRITICALCVSS 9.3v>= 3.0.0, < 3.88.0v>= 4.0.0-canary.0, < 4.0.0-canary.272026-10-06

CVE-2026-105844 [CRITICAL] CWE-1321 CVE-2026-105844: Payload is a free and open source headless content management system. In versions from 3.0.0 before Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended application behavior that can lead to remote code execution.