CVE-2026-27567

creationtimestamp| type| source ---|---|--- 2026-02-25 04:40:18+00:00| seen| https://gist.github.com/alon710/1f5269447a1894adbb81b93906c7462d...

CVE-2026-27567

Payload is a free and open source headless content management system. Prior to 3.75.0, a Server-Side Request Forgery SSRF vulnerability exists in Payload's external file upload functionality. When processing external URLs for file uploads, insufficient validation of HTTP redirects could allow an...