EUVD-2026-93502

Payload: Remote Code Execution through first-register...

NPM: Payload: Remote Code Execution through first-register

NPM: Payload: Remote Code Execution through first-register vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...

GHSA-97RH-RHH2-7VJV Payload: Remote Code Execution through first-register

Impact A crafted request to the public first-register operation can be used to perform a RCE exploit. You are affected if: - You use local auth strategy and your application remains without an initial user created Patches In the patched version data submission to create first user is properly...

Payload: Remote Code Execution through first-register

Impact A crafted request to the public first-register operation can be used to perform a RCE exploit. You are affected if: - You use local auth strategy and your application remains without an initial user created Patches In the patched version data submission to create first user is properly...

CVE-2026-105858

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a crafted request to the public first-register operation can execute code remotely when local authentication is enabled and no initial user has been created...

CVE-2026-105858 Payload: Remote Code Execution through first-register

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a crafted request to the public first-register operation can execute code remotely when local authentication is enabled and no initial user has been created...

CVE-2026-105858

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a crafted request to the public first-register operation can execute code remotely when local authentication is enabled and no initial user has been created...

CVE-2026-105858 Payload: Remote Code Execution through first-register

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a crafted request to the public first-register operation can execute code remotely when local authentication is enabled and no initial user has been created...

CVE-2026-105858 Payload: Remote Code Execution through first-register

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a crafted request to the public first-register operation can execute code remotely when local authentication is enabled and no initial user has been created...

CVE-2026-105858

The Payload headless content management system is vulnerable to Remote Code Execution (RCE) in versions prior to 3.90.0 and canary versions before 4.0.0-canary.34 . The root cause is a crafted request sent to the public first-register operation. This vulnerability is exploitable when local authen...

CVE-2026-105858: Improper Control of Generation of Code

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a crafted request to the public first-register operation can execute code remotely when local authentication is enabled and no initial user has been created...

PT-2026-106791

Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.90.0 Payload canary versions prior to 4.0.0-canary.34 Description A crafted request to the public first-register operation allows remote code execution. This occurs when local authentication is enabled and no initia...

PT-2026-37559

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the cpsw new component of the Linux kernel. An error during the register netdev process for the first MAC in cpsw register ports could lead to a situation where cpsw...