CVE ID :CVE-2026-105863 Published : Oct. 6, 2026, 5:17 p.m. | 2 hours, 11 minutes ago Description :Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that maps a field to a reserved authentication claim name...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-105863 - Payload authentication token field handling issue

VERWANDTEARTIKEL

Ninja Forms plugin flaw exploited to hack WordPress sites

CVE-2026-106488 - Backstage: Improper authentication in the OIDC provider

CVE-2026-106486 - Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions

CVE-2026-105812 - Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import

CVE-2026-106459 - Backstage: Improper input validation in Sentry scaffolder actions

CVE-2026-94114 - Apache Commons BCEL: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser