Mmastodon TechnologyCybersecurity first seen 8 h ago, last 8 h ago, peak #5

Critical vulnerability disclosed in Payload CMS

Original: 🔴 CVE-2026-105859 - Critical (9.8) Payload is a free and open source headless content management system. In versions bef

A critical vulnerability, CVE-2026-105859 with a severity score of 9.8, has been disclosed in Payload, a free and open source headless content management system. Versions before 3.90.0 and canary versions before 4.0.0-canary.34 are affected: an attacker can submit a request to a specific update endpoint that modifies collection documents. Security teams using Payload are being urged to update to patched versions immediately.

Why now: A maximum-severity flaw in a widely used open source CMS is prompting admins to patch urgently.

Payload CMSCVE-2026-105859

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 8 h ago to 8 h ago.

Evidence

• 🔴 CVE-2026-105859 - Critical (9.8) Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents… · thehackerwire

API: https://socialmediatrends-api.osmike.com/v1/trends/1264918