12 matches found
Exploit for CVE-2026-105844
CVE-2026-105844 — Payload CMS import-export prototype pollutio...
CVE-2026-105844
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
@frogbotai/plugin-import-export (>=0.14.0, <=0.21.0) potentially affected by CVE-2026-105844 via @payloadcms/plugin-import-export (3.85.1)
@payloadcms/plugin-import-export NPM version 3.85.1 is affected by a known vulnerability. The following packages have a transitive dependency on @payloadcms/plugin-import-export and may be impacted: - @frogbotai/plugin-import-export =0.14.0, =0.21.0 Source cves: CVE-2026-105844 Source advisory:...
@frogbotai/plugin-import-export (>=0.14.0, <=0.21.0) potentially affected by CVE-2026-105844 via @payloadcms/plugin-import-export (3.85.1)
@payloadcms/plugin-import-export NPM version 3.85.1 is affected by a known vulnerability. The following packages have a transitive dependency on @payloadcms/plugin-import-export and may be impacted: - @frogbotai/plugin-import-export =0.14.0, =0.21.0 Source cves: CVE-2026-105844 Source advisory:...
@frogbotai/plugin-import-export (>=0.14.0, <=0.21.0) potentially affected by CVE-2026-105844 via @payloadcms/plugin-import-export (3.85.1)
@payloadcms/plugin-import-export NPM version 3.85.1 is affected by a known vulnerability. The following packages have a transitive dependency on @payloadcms/plugin-import-export and may be impacted: - @frogbotai/plugin-import-export =0.14.0, =0.21.0 Source cves: CVE-2026-105844 Source advisory:...
CVE-2026-105844
Payload , a headless content management system, contains a prototype pollution vulnerability in the @payloadcms/plugin-import-export plugin. An unauthenticated user can submit prototype-sensitive field paths, leading to unintended application behavior and potential remote code execution (RCE) . T...
@frogbotai/plugin-import-export (>=0.14.0, <=0.21.0) potentially affected by CVE-2026-105844 via @payloadcms/plugin-import-export (3.85.1)
@payloadcms/plugin-import-export NPM version 3.85.1 is affected by a known vulnerability. The following packages have a transitive dependency on @payloadcms/plugin-import-export and may be impacted: - @frogbotai/plugin-import-export =0.14.0, =0.21.0 Source cves: CVE-2026-105844 Source advisory:...
CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
EUVD-2026-93470
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
CVE-2026-105844
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
PT-2026-106776
Name of the Vulnerable Software and Affected Versions Payload versions 3.0.0 through 3.87.9 Payload versions 4.0.0-canary.0 through 4.0.0-canary.26 Description An unauthenticated user can cause unintended application behavior when the @payloadcms/plugin-import-export plugin is enabled. By...
CVE-2026-105844: Improperly Controlled Modification of Object Prototype Attributes
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...